{"type": "bundle", "id": "bundle--36034846-2fbc-455f-a4d0-0a4d794e4e27", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--fc9ec801-2f83-451c-bfab-942de8d8c6f0", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--fe0f637c-da59-4c9a-9898-86e6a338427e", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--21cd087c-5153-4bf9-92e2-d73706bd7348", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7b37e634-7528-4638-9478-786b6ccb3074", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1232a5e-4c0b-4173-aa5a-fa87c1d51b62", "relationship_type": "located-at", "source_ref": "infrastructure--7b37e634-7528-4638-9478-786b6ccb3074", "target_ref": "location--fc9ec801-2f83-451c-bfab-942de8d8c6f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--664f0e0c-b58a-4291-ae85-f303fcbcc8a7", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ee29dfc-597c-40a2-82ee-7bb8869c2776", "relationship_type": "located-at", "source_ref": "infrastructure--664f0e0c-b58a-4291-ae85-f303fcbcc8a7", "target_ref": "location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--cffcc7f5-b6ca-40cc-8400-d2c87a81b3b3", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0edaa4a2-23d0-4ed7-a155-5f88033be3db", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3daa65b4-a85e-415d-82dc-12dc7f8f3f21", "relationship_type": "located-at", "source_ref": "infrastructure--0edaa4a2-23d0-4ed7-a155-5f88033be3db", "target_ref": "location--fe0f637c-da59-4c9a-9898-86e6a338427e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--938ff836-02af-40dc-94d7-392029af35b2", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a26fe18-cc8d-45c4-90cc-2cad47a1bc29", "relationship_type": "located-at", "source_ref": "infrastructure--938ff836-02af-40dc-94d7-392029af35b2", "target_ref": "location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--48968251-4c1f-49e2-bd8c-298391c8c3fa", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0c30c94c-c832-40c6-8ff6-5ed951dd5fa2", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72f65e6-4627-463b-aa97-8db5b56e29a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.15.52.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82fb0b6-0105-4c5d-841b-3bcd6941b3b2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.220.82.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929003e6-fa92-41de-89f1-b1755ae20074", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.220.95.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51e495-c348-4bc5-8593-fdd2f3567da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259e1a09-c768-4b73-8836-272587dd861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.65.145.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b4eb62-fa8d-47cc-9587-db77222b0faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5225b0fd-60d1-4f91-9428-5dbac1b13471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d02aca-8fde-4d23-a673-692b1f29143e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c1f096-c561-47aa-bdd1-0bb0b2b9085d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5287d0c-b63a-48a5-96f7-6cf5aa416fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823e762d-4324-4ff4-b4bc-2f2173a59c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a878566-9a58-48d6-b537-c3853ce77934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff23343-076a-4cfa-b95a-59a87cdd970a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66c003f-e8ed-4627-8c5c-c0f9e1f3fa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4708e212-eb52-4aeb-9468-236b4937edb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beae4c11-a55e-4701-8f42-ea5c99fb40e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea78ad6-19d4-4a5a-9afb-a390cb1f58b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b9d95a-c7ca-4218-bba1-611e68dbb432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59205f94-09c8-47fa-af82-f85b83d4734b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899745bb-5e52-4658-b47e-b67235e6ba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38163117-4ed0-4bc6-b640-476cc3cca782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515b4c3c-4981-4e29-91e1-06c96d14c293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120b215d-b70f-49a1-b494-7488632499ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8618635-2b77-456a-ae7a-492e55c070a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e9697e-5366-4946-86e9-ac88b4cf4d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f423f8-a0a9-4b29-9612-4906ae0eb017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fed156a-e933-4b5c-8ff8-ec4d10a9a504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c632473-3dfc-4871-b1ba-9f989920c755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e6e181-bd0d-4e26-ab5b-f4b71031c1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.54.213.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8238fd2-7a0d-4dfd-83e6-29e8e15fc2b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.100.194.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbd00c7-d274-45e6-84c6-ef7127dad8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.153.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2fea37-4505-455b-a822-0647a6555899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dc3081-0342-46c4-9eed-444cf695d309", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.89.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdc89f9-8106-4874-a5ef-b1a25e133696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.132.145.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a607f31-5374-4ef7-a02b-85fdf6bfba95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adc43d5-09d8-4054-bd2f-8c2f81cad730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.227.203.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01e311e-7cc2-498c-a40a-8fb64c3133a3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.248.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e797d1-0e31-4b9b-8a11-ffad8ac641e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e880d546-fca8-465b-a1ab-2a2fa0518374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a09088-b473-410d-bda3-8356e10ad436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d09c62-e06c-4cda-bd8b-f34db5da0566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb31c0f-04e3-4907-afb3-ffd0f2d31643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861fa62b-6309-4e21-a754-32095c382f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08baf522-4e99-412f-9015-20f7472fd8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d90fd1f-b585-4818-a672-cb7317af5a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a730bf9-cb26-41b7-8b45-7d3f1ba62079", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.111.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3fbe82-6a1d-41b7-879b-39e838dc4f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf52973-2e6a-4e5d-a022-5638a6878481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1d2e27-e9d8-4562-9b65-8886aa0bd07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673c64e5-509d-4970-a8b0-809183344ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084d5431-adf8-44d9-a5f7-9e10095aea87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f9bacc-1bda-4010-90d0-f89bb13d2786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49038e52-a5ef-4984-9307-5c860637bef0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1300012-43b3-477a-aa65-785f85bbd79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de2a6d1-8fb4-410b-86a3-0cf48a17b7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f73509e-7c82-414b-867a-7ccbfcd9f26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a538dc-5614-49cf-8bd0-6fa77a40e6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ef07bc-daa0-486d-ab77-0f339f54f267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5efa46-7643-4f4e-b230-ef2addf51d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29478389-fe8f-47a6-a0e6-8b19215f5f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.35.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aded62-0b3b-4e5e-8c78-3289c8245610", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.155.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f37a5-7ebb-4b1f-87e0-9a63056ba7af", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.77.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a05593-80b5-4448-9dcb-0c051a0caab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.209.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba0a098-143f-40b1-9515-6b55a9ef4c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.192.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada62457-09e6-41fe-bf28-52f9a811b696", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.203.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb5cc14-358a-4e3a-8348-5eb03db13a8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.211.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a542dd-033c-4599-9584-c6fc2b20b1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6468adcf-0286-4f1d-8b05-1d7d040d976d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.208.34.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1839be-baaf-4e46-a6e3-0cffb640ae3b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4b6fae-af99-4260-95b4-d394e0160f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db48c66-7c5f-4c46-999e-d7f9f0303f13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.240.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78664ed-1ab5-429c-8e8b-47d29cc5d52e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.92.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9637114-f60f-4172-a04f-b053164d5490", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa493c9-50b2-405a-bd4f-217a4d5d16b9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3ee0a4-c321-446c-b387-55f18e0cf9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2d2a21-e7aa-4bad-bc48-7a4010211c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbea0563-6627-4aa6-83e4-e481f6a90d25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c881834-2bf1-4aa9-ba4c-f88949c2544c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f7858d-1a78-4618-835b-542cb1b390b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad356a58-b9a6-409f-837c-c576c2a310bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb779fa0-85e9-4756-bfc3-25e98c6e98f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875fb2ee-39de-476c-8783-75a23ed4d6c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.177.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2539d38-a913-492d-8302-5b923c81196a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.23.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022b09eb-0812-4de8-835f-a1f91b7464c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6a24c3-9494-4285-aec2-68607b2386f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434864d7-157a-4751-b6a3-1f6a16913725", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.206.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4887f2e1-092f-48f0-971f-4950f8cdb92f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.20.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be62b11-f3cc-40ec-ba4b-01a431f3a88c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.236.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113f0407-3427-4b3d-a7b4-d5857b83121d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f97deb5-e69d-4b8c-940e-bafe1acbd1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103004ee-233a-4fbe-967f-7bd7291b12cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.131.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb338f61-df05-4d10-8e29-729df56ff082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133b070a-62a8-4bff-b7ad-69c4daaacf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594c069-a1d6-450c-8ff2-213f9bd021cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.0']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d91dad-2251-458e-b776-03fab40498ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26d5cbf-b982-4ccd-8397-ca28155fc98f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fe9446-38bb-414d-84c4-91bf09cb5a05", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.101.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2012dd-733e-42ad-a6fd-12444c800349", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.186.139.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f3719b-d394-4dff-bb54-b2b0761adaed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.234.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de3a36d-7db9-4208-80e7-6fa7eb74750a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f25b571-2e2d-4898-b094-a5c26d254fe7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.7.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7c96df-9720-4cb7-9307-96642e2dd506", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.122.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3eeb3c-2e20-43f2-8f8b-d4099314c100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4088e1-a499-4ae8-a2bd-83ea237a5d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ccd024-1037-4421-95ed-34489092b7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e16b42-7c63-4313-b8a5-ed381caaeb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef8a903-7d29-4916-914d-fbd0d279ea66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85a38c3-c72c-4275-999b-27e6f97d288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.0']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282f35b1-9a98-4574-8949-f8965522184f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e7b83b-4ae3-414e-814d-2fa264d02be6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.238.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12d1410-8909-4b77-9054-3c96f910d909", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87aaf816-0a25-43fb-81b6-cf17bb583d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.122.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f358d07-8c18-4b19-aa62-64334ec19c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24a207a-571b-4fd1-8505-a7709945cfc4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.120.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c095d904-f030-4e92-9d4d-c4e848dc91de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.231.14.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800ee1cd-a7d5-402d-bf6b-539e3cc45d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.233.24.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60107e09-9bf3-4b30-979a-83456dec6a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe1c6ef-0513-48aa-bff2-3a58602e0687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fd726c-09eb-4f7c-b755-8f4586084f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5519fabe-b9e5-444f-b3f7-8dda0880de80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb74af9-fc3a-47cc-af32-fa0294bb9071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5841f92-a428-4b06-8af3-1441d9437091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8530a4-ede9-4c1c-9abf-079ac1c7142a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362b2dd9-1a82-4a00-bd03-a2aa8af15f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9409bcd6-ee7d-47d1-970b-ee88a68e4665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246c38e6-b5b3-4804-ab4a-a0ca979f9be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46187cdc-a283-4c58-a7f0-e363a07e46f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89a6c56-0868-4e73-9784-ba94d2c60287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5a01c0-cc47-41ba-a602-9297cae28e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5144a852-bf32-4ed9-93d7-37c7313af598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae94dc1e-9e93-4bae-8ffe-586a92ea510c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.182.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2abf7a-99aa-4599-9983-8f067f3a593f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.219.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4365c1f2-566e-4a74-9ae6-37ea7517711e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.4.233.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0dee5a-35ea-4e76-acc1-aa1510ed63fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1632f37e-48f6-4cbb-87e3-6fe0a1105dcc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0de801-c1e7-4ae2-9abd-18dc6e567d3d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970859cd-c08e-4545-accd-de8a06364fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.198.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ccdabe-5d44-47f7-b952-124b09823761", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2442ea87-275e-4382-8dd9-30384aa43adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf98466-6b9a-4ec8-9e3e-be05cd0ab72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f743db-f183-4cd7-904d-f1caef89c931", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.136.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c56d5c-e2a6-4a8e-86a8-be55f38f64be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5262b0bd-0170-42fb-8009-0987f0e36d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87166938-aa41-466f-8473-02cce22eb95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05c7e2a-9f67-44e2-8d0d-fbfcd8cb5820", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.154.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03393a12-1a1d-496c-a6cb-c810c0403eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab5dd44-14a6-4c3c-b87c-fc315b74bfbe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.68.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda12d41-8097-49f8-b69f-84b8ef94994c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.197.150.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878052cd-6e15-41c0-bc90-40042641eeec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb880dc-19d8-4b84-8a93-6b872b019a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1648471d-ee4b-46f0-9ff7-35dedbce795b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.61.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb2f63f-3639-4041-aaa7-eefdbe342f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.63.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75bc446-da31-481e-87c3-b21580bdc49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abff129c-6a44-4f1e-a23b-dbf379b8c491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f2698-6195-4851-bfc2-ec67ec3dc0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea78921-8cb2-4331-9f13-88503dc46a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233dade3-2d12-4532-911e-6ff19a34e534", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd88bee-a82b-4d45-b601-693758ca22d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.106.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01c3789-e6ae-4ab8-b088-ac4fd0079693", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.218.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bceac5a-f64e-4729-a11d-b1eae8a50ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.48.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65353cd9-9d09-4c1c-accc-bc599c84cfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.51.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832479e8-5729-4396-88ac-f3b9e9ef06e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.52.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c112efa3-4098-4a0e-92f5-ae852a2bae9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.53.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1073767d-1f75-49c5-884c-c8170911df61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.53.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ac41f-728e-44cd-bcfe-02106a70486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.56.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0d459f-997f-4a1f-8785-1f48cd0e9cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a23ec41-7f4d-48e4-b12f-330aa66de753", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.253.25.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0a9c11-4385-4039-b642-44be5018d3f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.216.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72eff00-930f-4d67-9ea8-a2d22a681123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.184.218.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2d2933-a7fe-4b0b-b1be-3039facc6621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.108.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd509fd-3be6-4b5b-81d9-3fb300abc954", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.107.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b59f6a-a4fb-4460-8352-abad0f051459", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.122.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c35d49-7c75-4c71-b40f-8eb50c6d384c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.70.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880cf560-7ef9-43ff-925f-e4e08e244934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.46.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da0c8bb-8d19-48f5-b765-4419e399bf88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.92.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ab05a-4f5d-48d1-8ec8-03908aa15a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303c6af9-3c2b-4ca6-8b9c-57f6523553a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc95965b-ad96-492b-9227-234444c81a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae17bd3-7df2-4305-9fdc-0e88888d42d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a31f3e-5688-402d-acba-8a93bef1739b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e2e454-2d3d-45fd-a032-7a6e951e98e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac664bf-34f5-4c48-8fd5-587cf8a30761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63d926e-fcef-4795-b221-8e8b6779b305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7cd4dd-05d0-45c0-b31a-86dc916b40d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.21.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87905804-6156-4559-bad0-7b6ce81349dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.60.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c343846f-4ad1-49f4-9a4d-364039b189cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.92.145.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d343aa-6a72-4747-a9ea-73209f658053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa227f83-b1f4-47e4-9947-a00da8ea58b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0133f1a4-44ee-4ffb-a97c-12c097e714cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766bf573-bc30-47f5-a84f-821645099c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5711fd7-6584-4c1f-8847-4dfc355e0cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d7eb14-15e2-466e-b73b-901ec55615df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8aa376-e0ab-4318-ab9d-9f1da38bec83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b981a8e-1a2a-4995-9737-430bc9a6ee6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a1bcdb-2fc9-452a-b0ff-8e3edec79b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2e3fe2-2836-480c-aa03-37228b0a2d39", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aff99df-af19-4927-ae55-3b91fe322aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c37f12-a8c8-4a19-bb0b-4e5d6839f19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45727778-a86e-4b26-9674-07a2f2a882b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b452b7e3-cba4-4d3d-af22-2bcf74bb6340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093f2161-635e-4268-8322-be451598ffc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03885840-3188-4f2b-a3ea-2dd039fb6f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14efb142-52de-4e79-aead-341bce6c265f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ddaa40-1a27-448b-8ae1-7e09abda474b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6783bea-a58d-4ea1-9cae-9cc04129ca2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975b8a62-2392-4d23-8837-993420a5f280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6142403f-cc04-45b1-8db2-496815f9e405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e24ee4-780a-47d0-928a-8df61c3ffb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f9137f-ef0b-45b3-be3a-383aae2b02a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa261c3-ea80-4bd4-83fd-e6d01c327094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93974b1-febc-4728-80b9-c625aab71801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9689c7-e67a-461b-bb7c-4feb027f5263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.65.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd882547-1064-4cd4-a32f-1cdd4387703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.157.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92aefb3-aa5b-431d-aa3a-40f9fcb83412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13181200-7c6f-4b78-b256-0399dd370047", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.156.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00b205b-e307-4d8f-972b-9fd703af00b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21ea58a-3e05-4d60-a262-2859539fd1cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.27.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c46131a-ab7b-4fa2-ab9a-56c70de9df4e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.208.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8a28b7-35c0-4b9f-a2ff-211dff8cbf09", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.209.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022843bd-07eb-48d8-bd47-4cfe3448b23a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82733b8-2cc2-474b-8e2a-94980e980345", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677133d1-bff9-49fe-ba18-43f868c2a07a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111fefec-0c34-4713-a8da-227d5f77e283", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.219.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba35348-d53a-40be-978e-544f1fdc30dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3084299-021f-40ac-a870-1c6059a8d2db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d22fb8-ecbc-42d2-ac6d-813757ccb97a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.220.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95f51f1-c653-4ab9-93d6-9f664e1ba776", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.221.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b89c582-6c04-4886-9427-867911153024", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.222.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ecb16b-fcb6-42ef-98c4-3dc9c4a6936e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.225.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7dc5d-6893-4bcd-9160-c364b70d62b2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ee71b-9088-4e77-9ca0-cf91a49081df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b73323-32d1-4de0-b7b6-a239c2589240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50c3477-9d62-4b22-a03a-6be28333f41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20a4553-cd7f-4dda-bc87-3935660aa665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f22695-bca1-47df-b149-859034817e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ac8e4b-31ab-4991-b673-08560e2d73b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34c3dbf-3e15-45ad-a654-f11a548c7930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f431894-5b9e-4ddd-ace8-7c5a39a209de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.162.200.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf049fd-2480-4f8d-af94-806236dd168c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.241.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48859725-eac2-4640-8ec7-e63d5605ed17", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.244.96.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6958d071-8dd4-4341-8b6e-f2a37e00157f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.172.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9d71ee-6749-4d14-98c7-19ce833bf602", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.14.190.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369993d6-0ae2-4862-97f4-2054c419edea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.225.255.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2531bce7-bcef-4fa7-a12c-a0fd62d709ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.120.12.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce1ffd2-6607-4d19-a3c0-75005a1d55f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.68.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770a87e9-a676-4b94-810a-590f32ca8596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.69.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fb09c4-7399-4f83-9b0b-1a1567917242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.255.8.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1a8562-6a6f-451a-99c5-69c144bd245a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b61e91-eff9-438b-84e7-9b1c051191c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.59.20.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f76fb1d-23eb-41b6-8608-64dcb98d0e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.68.111.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df29176c-4418-46e4-a27e-abdc608c2e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.140.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fff4391-02f8-44ca-b928-15a3358812ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.38.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8b4ca3-bcbd-48a8-9150-1678c70ffe61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.57.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98ec745-7c76-47f7-93f2-c79ae56666ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.219.104.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67c36e9-804c-4c7e-9c19-c076203345fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607144cd-edc6-4779-9086-1d8c51de46ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dbc513-7b54-4ae5-84da-47909e4c7dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dfb997-258e-4a38-9b20-d3dea4000bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f8d8af-089e-4d77-87bd-ab019dd66930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b89b69c-a3cd-4adc-8145-ac27ae0def94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc9a920-477d-4256-b8a9-24b57cc10cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ba8f89-98e8-44ec-9e23-ee443ddade14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa396889-692d-40fa-8921-c21a657d045d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a7d7f2-b375-4c98-b96f-6757e7fff64d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6888f81-4742-4fd9-a0c9-69e4dc053eed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eba9e6c-cf72-4a87-a4ec-0bfc3d79bf5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0e2680-1898-4f76-a60a-93b530d21fda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2120c36b-6638-4571-a728-21680c2bc819", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d06b829-7ba0-4737-993e-adfd03e72eb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3477ba3-8016-43b9-b6eb-117592214fd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da809001-9fe4-47b9-9c68-dac357a67456", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afedb359-c229-44e0-8f57-33dd4ee08de3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5298e915-f7ff-4808-9b57-aa81e5ef984c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd74ec4b-687d-4b8e-884e-a59fe41fa352", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ed2144-15a4-443b-b7c0-d9396d89c448", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dd89f2-f8ea-4784-9a4f-bc604d2cba83", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.130.85.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b46e709-743e-4e5b-9b2a-4b45a7f9bd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.227.225.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e761e8-29da-4012-a8b8-f1c6eee7f437", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.254.1.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a69b01-3c0e-4602-9ee4-88f52372d129", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.31.74.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ce9af7-818e-4cff-805f-27fa74ef5cf7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423b3397-6117-4dd8-8dbb-6d3aa0d690fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.55.35.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd291dd-da54-4b72-935a-0d8ad07cfaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.79.162.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44de058e-6927-42e4-ba17-0bf7e5086b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.118.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0275ce-c163-47a5-8dd9-9eddcd55aa27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.127.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7673062-983f-444b-bd6a-f69a5cb1ccdb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.159.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8c1315-e277-4772-a02d-c890f6622ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.165.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cd244b-3d79-40e3-af67-1d9842a4a4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.241.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd73138-8654-4a67-8c64-d0e99049a813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.69.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b279e4-18af-4f07-b825-fb88653e4757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.64.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf3aa25-ab60-4f6e-9232-50c92211b04c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.208.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415f3935-3eca-44ad-b92c-9cefdd2c9efd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.91.48.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2279013c-c5b8-4ba1-9564-999de9d05ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.16.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f64014b-29f9-40b5-ad60-eeac0346b172", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.16.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d87c758-6ba8-46a4-bb71-d59c10c47718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.130.171.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910f348f-cf9b-4f0b-8d35-c12b36f80534", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fdc2c1-6ae3-4d83-9adf-41b8952c8bb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c786ab2-66c3-4155-9e6f-1b07bd441fce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a339a21b-7051-42e6-8de2-6995380e6f05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8c228e-dd75-4f84-89fc-047a0fd5b2ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee38a2cd-79af-4135-b529-b90ca71e2624", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78352af9-b635-4d05-9815-e75bb9299f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.112.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8da8082-78cc-44d5-ac56-5ad2d8b763db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.41.81.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382338bb-3c9b-4c08-8a83-0d29d7967658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.90.97.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b3229f-8028-4afc-b900-f18d3fa34bae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.175.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ad5800-49e3-45e1-a561-d4b34861ab57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.237.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476e8305-9b8c-40ca-a39f-2af4ff8813c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.237.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a87368-c330-4693-b5b1-adf5014ca357", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1298ed-cc54-4b73-8e88-390e90d63fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.143.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29b2cd8-551c-4d03-b454-ec74e00a62ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.6.44.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296c516c-4872-4eea-97e5-2823a6aa1860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.167.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd15344-bebf-4b94-9dc2-ba3b0b5d95cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.141.147.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff8f037-c3c2-459a-991b-049caeb1882e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.104.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd8381e-cf05-4fd9-9c9f-2ffefb26e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.116.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3a546f-6b13-4996-b939-e33f02c82362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.243.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb69735-5e85-45ff-a01f-e9bb9d74cb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.245.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9ee493-c824-4a4b-9ed0-268be0a74016", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.186.208.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3918bb-ea1b-454a-8304-48bea9f1c069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0bf5f2-5fc0-4b43-9a80-b7847939f471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f788755e-f069-4caf-aa73-daa6112e110c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cfb1a1-3a1f-467e-9076-7409f69214db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab469a5-3597-40ef-a903-82a71ccf7fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f959b54-f7ff-44d0-8217-698d8270f228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514e20d3-dcbc-43ab-a7ac-b6f5c49c2041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef25634c-7141-45a1-9e51-4308b6686901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf31b0a-d652-4f9a-8f28-2393d0531a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb1f3b2-f0b5-4249-8961-03a875ac533d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4e1e41-ff67-4d61-b634-134a66d2535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163d1acc-9465-4e03-a356-17e8db39fbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18332253-27a5-4773-aad6-abb654a707c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d464be-dc70-4c18-894a-32be512c993e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfaa6a20-59fe-4896-946a-dc54414f807b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b90b25-9225-48a9-90f3-4e4c7b92c855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ad4e65-90d4-41e6-81ff-21cc4c81cf2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2a8c1e-b802-4dba-a692-c90a831fa09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94acb9c1-075a-4da3-bc55-02c128982f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcade6f-3b87-439e-8cd5-eccb01138dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0243f3d8-2739-45b0-b04c-3af976ab1157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb1ab5-e196-4ba6-82c6-747c5f026fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf299100-7656-4611-8129-dadf946fda9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2486245-a571-419b-9dc8-00725f52a27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82991735-3f97-4fd7-bdd9-5afeeee66477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bc507e-7d4a-43a4-9b8c-9e84756d7a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6d2420-7e83-46db-bdd6-fef4e49a5e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c97381-4c86-4037-adcb-3e18661a371e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af55d0f-05c3-444e-a864-16617e13c6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4139cec7-8c4a-4c05-8a62-357f9711a6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7614f737-f1ad-49b0-80b0-f52eca778548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93fc76f-1e4e-479e-b85d-aa5602069576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e40d60b-7954-4aae-bc1b-9a60cfbf032e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d510b825-14c6-49aa-8e09-f8694885f137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e6cc8c-4cb8-4a3b-bab1-fb60ab834d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbe614d-72ca-480c-8403-10d0c1174322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c84bd52-b1cf-49c4-bfad-ffb842f2d618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15705dec-51bc-410b-8672-dbf54f9ebbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ca6e7a-b732-4d1c-912d-2444d3ff5fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114e5892-d49d-42e9-8578-25717463263a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e797a56c-729b-4b23-a28e-2c28d3d96ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef24de77-44f7-4140-a962-5fb0c36b9ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0796c1-3f00-46cb-9546-f55b23f4e726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5778ec61-606d-4a80-9d78-6c826fd40e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd29927-4b05-4393-99fb-d060be169290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98028d6d-f807-4919-9a26-b09fbc51ab8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cff4a35-ce91-4d3d-879f-99006d7d7720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f742a9-30bd-4b91-b952-a654d9dc74e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.56.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f091f19-ab34-46d3-a005-862f67651689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.233.243.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dd29bb-9d07-4729-a1dd-d100b3aca882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.65.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c30aa23-dcde-4a06-a71e-c108cc8677c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc11494-9ec3-491c-9330-af6945f4c5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d832f9-add8-4577-ab9d-b0bb12a3dd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41c2cac-563e-41fa-af9b-f0cdf564d1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9993a13-a39a-4d8f-b404-9b84ee9ef403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46708231-3cc1-45f6-8cc1-801c57358998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479d789b-a780-4828-ae6a-3a9b9529c2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6edf92-4c25-422a-af3f-12c7c519f155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542ca04a-116a-46e0-8981-9da2a25120a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.33.113.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4febf740-ef5c-4d9b-8c14-fd06b0ab864d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.126.12.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292b5d2b-908e-456a-9ab9-6d24274eea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.189.212.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76219a8-b913-491c-b832-636875eaec6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.246.15.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ccb7c4-46f8-4577-b864-32630bd902d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.130.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e77121-06a6-45b5-b26c-4ba4b167bbaf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.157.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b275fd2-85b8-4a5d-8872-1abc88cd301b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19bc060-fce8-45ea-9a53-8624137c58fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.236.49.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f70d47-736b-4e94-a380-ed9bc757e36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181dd6fa-5fa4-436d-af9d-f84fee01270f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.152.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e080f73d-01b3-4a54-bf33-315411b8c895", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.153.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b869273a-eb15-4f86-b583-5f4457e80d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.26.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cc517d-428e-41c7-9445-d0d0fbca4ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.92.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a7369b-2683-4494-9918-c967d6b05558", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.128.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a76041-1c2a-40b8-9437-9b4d98909464", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.182.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c892c18f-7ced-4556-b7b6-e1339b4f233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.15.140.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a509f3e1-f96c-4d84-9edb-85784a14f09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a81977-b8ed-490d-bf08-074a9f7f11cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.170.136.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744ed18f-4ddd-4b7d-a2db-253274cfbb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c8791c-55ab-4181-a2a8-107ed7c49813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.199.172.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dceb3386-048a-49e8-bfa8-3d3891f97d19", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.171.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befed4f5-c72f-4bc5-a691-55e9e5cb6264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.63.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ce5c42-4690-44cc-b3cf-b026c05b3da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a9d0e6-5428-4bb7-bb27-d9396cb95b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.165.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c616ba-66d1-484d-8f3f-7647e5510c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.152.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35faec1-84ad-438a-b73a-6916f244f9b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.10.115.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98b721c-0b71-464a-8546-2f64a5ec84f9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.113.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2b8cd4-1d70-49c4-89ba-b87389233c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.8.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7696055-337c-48af-866a-350f2378b63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.119.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bacea7-ab57-4d7b-b1b8-67f9e48d061e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.168.123.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754b787c-5b88-4678-a9e2-042215734836", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.25.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee9891e-8b82-4cc2-90d6-087134a8c339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.174.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b428a8a7-bef5-47a6-9c5a-36080bfb3fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.243.207.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b2748-fc90-4287-b089-0ebcf04f7b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.247.119.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58559dc-1b6e-49d5-bdd6-92ab22eb3bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.135.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed398f59-21aa-4890-bed0-82b234e0135f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.146.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c7c177-60fa-4cea-b355-7b651ee9d9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.50.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ba871-842f-436d-aaad-e9fd9ba2f76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.209.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b6d18f-19f8-41db-841a-e12b55ed17f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.103.51.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57bc9f0-c7d8-4b0b-b6a1-d7579fdc20b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.110.182.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6aa498-48e6-4669-bed8-16f4875a3a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0879c13e-f3b2-4a22-a22c-f959ec1d6457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.232.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2d490d-5699-4b6e-b43c-7aeb7acf864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3479fb-f91c-4df7-8df6-9542935092b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22cf775-b669-40b4-8e4c-d128eef73f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.138.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc073e4-116d-413f-b8c0-c6e84daed6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.193.19.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4260264-b09a-45c5-9904-f20b829496fa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.21.26.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58b8bff-1c8c-4a35-aa00-314407472df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.222.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd273e6-f4b4-44c7-bb9b-837b4df87b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.244.62.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe099d8-8f51-4dee-a422-4c6643f5dee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f6f438-1c64-4a64-b1d3-137f34e9ef5d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.162.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8c42d4-c75c-4bbe-91af-12d36b290aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a3ab03-ad8b-4e8c-a867-4c4fb22f8c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f2b61c-d8e1-4513-bd6e-ab34c408743d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2b5c7c-efc4-4dcd-821c-49c62e754fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b3a850-a53c-44cd-9300-5b31d74d9909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805f300b-3f87-4eef-8f43-cb9758b564a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88878dbe-76f5-49c5-bae9-8f98df9b79c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0956fc0-8ef0-4165-8bbf-95e572692a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137f73af-4c5e-4b5b-bdbc-c041c60ef2f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4291f4fc-9d4a-40b4-bf71-571354935520", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.212.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b6f863-c437-416e-8784-2907d6844f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5651e4-2e52-425d-8bd4-4060b95d8af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511d6a7f-dca7-4500-a443-ef0ca1c964cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.96.79.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21af3255-5553-430f-9cff-7102dbb8e2d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.18.182.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9624ce95-9d92-4936-b9ac-fac46bc53569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.165.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbe2047-70f2-4549-966e-cafb3198769f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.236.76.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d96d98-3eab-4804-b6f8-83d6896e72b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.40.252.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1827c8aa-5c0c-40cb-b78b-695ff32aca24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.66.57.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df01066a-3056-46b6-a27f-32a42955369f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.112.178.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6327320-09c0-4a52-8351-37d40107b95a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.37.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e87c125-50c2-4b5e-8512-2b5668b48dac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb00256-ca83-4267-8fa3-631273daf21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e63c551-9b45-4f33-a30a-cac427bffa3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6289d-7ab0-40f2-8f2b-87f241cdfbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632e2f42-dadc-4312-bae9-c29aed76369e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae50736-71b1-43b6-9444-e3bd5ae6f680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f1c443-d894-4782-93c9-3f3226d9647a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842f0e79-de21-49e0-8f5c-05e8771baf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6411e006-856d-4248-8969-a749c7964389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67332aad-02f5-4891-a0c5-60eca5d9c34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9971794b-468c-454f-bff8-5b13240399ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c52703-3357-4e41-a724-6f17ed94369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9d71d0-bb6b-494f-a006-97491ed08293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b678bd-8dd6-43c8-9f0e-b44df84f417b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c61813-a509-4be5-b0ee-19d0a663157c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430fa8ad-01ed-4583-ada7-fd1829d54625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcba7bfc-36cc-4370-b195-9d1f063a75ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.11.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a856f0-7253-4fdf-af67-9e8dff5bbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e580c2c-5d59-4efa-a721-e8cd85b56e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d600ac8-1a4a-4312-9b7a-3fdf91f7ac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da524d7-d658-45b7-a454-7dd2a2cc0dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.241.231.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37ca827-3d7b-4322-a48c-363e0b87222e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.78.143.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6873fd8-85f0-4a07-8b2c-c4dda74b0bfe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.54.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e76c4c-5533-4160-b72f-060435402d80", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.184.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307bfd5b-7076-469b-a212-dc1d737578a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.83.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c6148d-f00e-4590-a8f7-241f74643112", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.95.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa01c10-b40e-4972-be20-d1e779c1716e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.137.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc02c3c4-f0ff-4df6-8825-2e919cad467a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab1da78-9383-401b-ad8d-faa1a86ae0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab83c3f0-2ecc-4884-81d2-fd001014954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210862c7-3cc7-4e5d-865c-0b2f4355cff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb562d8f-d522-4f89-a62e-db728458fcc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2412a0a-c5bd-4ce3-9750-9edef7287fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2056769b-5d3a-4500-af3f-b81467bc5643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55311a9-865d-48b7-8d4d-0e6880a0a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d23289-178d-42a2-a3c7-aab3ce251611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402b16a4-43a0-4c43-863a-8b494e15913a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cd549e-5639-4a1e-8b30-e7b86669784e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501c3576-553d-47d4-b1bd-1dacc477a005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db510f56-6fd8-4994-8c24-01c531b4a018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e19991-45d9-4c5a-bb73-460a552092ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eac1ec2-5215-4ace-8626-847dd8169518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89918539-ec2a-41ff-a514-66324829262e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.100.242.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845f4eb5-7890-44e3-967a-7eee490bf2ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.14.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fe0192-1bcf-4d93-8085-25c8981aefe8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.115.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fc2571-83a2-44a4-b7d1-93a85ce92e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.131.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc13fea-6282-497a-a8b4-cd859bfe805c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.142.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0758ba-7242-48f5-ba43-09444e7dc54b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.155.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715cba3f-9828-4dc6-8c84-12a855f52d3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.26.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0258381-d0cc-4f01-a56a-5e29f8f21645", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.161.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16626e57-ad3a-48d2-8c87-f147056fe3b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.180.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfb9111-09d6-4d05-9c27-bb5f7fabdc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.123.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed54841-4f8c-4ca5-b4c0-20359eb6df31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817bf4d-5696-4436-ab2f-3ed3a388f371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.17.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f481713-3f95-4c2c-9547-18b584b18182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc89ec45-22f0-4361-95eb-29e33ab726ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.159.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233302be-9a29-4a03-ab0d-3c7c5cac3046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.180.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213ebda9-685a-4d14-b9dd-26fa9b376c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.214.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1640d1fd-167f-45a9-8750-3ce23f1b6d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.62.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a22416-8965-49c2-afde-8a104b4d4603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.64.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7731d26-2c94-475e-87f1-9f1855e0223a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.67.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa840df-cbae-414a-b88b-197ff5a507db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.228.12.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067ef8d1-fae1-413e-9c5d-4b8684394acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6acdb5-c29a-4b3f-a369-b7f16f107066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809830bf-517a-4d92-a523-4352975f109c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b536284c-eb80-4625-bd08-2a45e748de43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c92478e-8c27-479b-9750-0db4950a8cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f764b2c5-1ee6-43a3-8e00-0e561de943d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b6df35-9417-407b-997b-614124da936b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.4.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f80e25-2475-4392-93d6-29cfe8da5911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c445670c-dc2b-4fa2-a4b0-fe6dcf1beb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89fe869-a362-411a-8bc7-848eb01ce22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9475ccf9-bc37-4380-8e29-fba2477bbbdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.138.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c989a184-a38c-49c7-82a1-1a5aa4faf709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ce93ac-5dbb-439b-8179-ae72e6f7cd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f20c85e-b034-41fe-ac40-4c176dac2e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5e1780-14c8-4566-93d2-82a83b8b20b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a09d59-7b68-45ba-9426-bbff01f10578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec22c7b-3a8a-4aa2-9770-789c7742364c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ebcce2-1716-4c91-97b9-820beef80e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac00cf8-fa39-498f-b36c-7ab3df8308dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20102e88-79f6-4715-855a-645396400e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78831410-51c0-493e-8838-c91e9954b4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5966165e-0c07-475a-9b53-96bc774e63db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02ac057-01ac-4c6f-bb87-1870823e1d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cccac5f-7190-42a0-8186-cc122a17762b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d742b2fe-72e7-4156-9b94-a7ad5167d0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a181b2e-9beb-46f9-a536-59d95080bbea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdf125e-da14-42b0-83c1-71b691ffd6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae147d6e-8be4-47d0-955c-e2c79e163495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ae26b5-60e6-41e7-97fa-18343abc7df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.115.180.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2249c4b9-45ec-4c04-b4da-0ad5b7074fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.244.90.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084fdf49-a245-41cf-9b45-ba4bfa57a7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e58947d-af05-4e75-bca3-47e5b308e70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.145.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7da1d6-be61-4acc-8f1c-4a2bbff692e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.150.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27471d1-af6b-46e3-8427-69e1a562ec93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.156.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4610bac3-1b91-4a69-81af-e5d5cfcf2ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.178.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aade5061-9f84-4290-8751-317887b49023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.208.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401dfc8c-0a0c-4749-b62b-edeb7e8f5974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.214.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeca5c58-88f9-4dea-989d-70ebe14e6c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8322363c-5866-463c-8fe3-60f0ddce2e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.49.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae5f625-f90d-40ee-bc08-ce99d8653bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.76.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212248e9-104c-4eff-82a6-b93252a8ecad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f00ef5-9410-403c-8978-730ca2dca759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.220.202.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec9d545-2a71-48c8-a174-b86a999e94ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.113.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ff6580-6934-4e9b-90a3-9244a82ca962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.77.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7133d3cd-d17c-4184-bcae-e4a83c6935c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6f15f1-3423-45e7-9b7a-99eea067ee88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.204.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ce1b22-1374-4ad9-a3b4-93a3fb03e091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.205.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22319fcd-a455-432d-af37-13df60c14c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a61e9-e9f6-49ed-a99b-4c0c125661ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6faffa-65ff-4997-aa2f-60941e549d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc0d56e-5d8b-43e4-b5f8-c2a5b41a0006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2dc4fd-2354-4605-bc07-118c09583845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687b36ba-4112-4918-880b-4bb6af7f36bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.152.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1ac31-7cd0-437e-9778-d3f29fc1b2d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.243.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de370e78-d34c-4d70-a602-0993c1001e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a88604-9d15-4092-8b2c-c5a88cf92bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.99.79.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1dbbaa-7295-474c-818f-c0b7e327d0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.99.80.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0aaa89-c0a9-4404-8af3-69a6d1628186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.59.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8e6e5c-7b61-4dec-bc93-cd370867d66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def8f238-9b2a-448c-9711-feb8ace7d313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31e7267-6ec9-4df5-99aa-fbca589114c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf00b3c-7614-4368-b85c-486ee76c8b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f86760d-1a48-4db7-b489-2f7588723b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ef5595-fc0d-4a48-b86f-b55fd7ea4bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ba81db-7bed-452a-ad3c-d08b4f02f30c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8f79e5-1771-4db3-8d05-c45cdd24d2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9bbba3-ed67-4a95-ac36-d34c5cab7770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.196.120.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba9a42-e899-46c2-9817-ac1367e1da18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.199.191.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed367964-86f0-4404-8095-0b51a66a47e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5b1849-ccc5-48f5-9369-2b11680f7615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.10.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293c3b83-dc43-4641-a138-57c0c936a5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.100.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897a76b2-8b49-45a8-8536-246f717fa49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.248.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03c297f-15ab-4426-9d0f-10c7d8055974", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.2.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5967e7-3a44-4377-a8cb-e4de2cd10317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648ddeee-1cde-472b-81a0-1da67f81ce55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5ce362-adb1-40eb-96ce-2ef6291d8c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88f06f2-f4eb-445d-beed-a41510373883", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.84.152.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457ffb6b-43db-4d08-8fea-1efc315be0ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.38.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de13b397-ec3f-485f-a769-bcf45ec01139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.52.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d45ec2-dbd9-4307-8e74-ae52426db4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.107.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da577c44-c41d-489c-8340-d98062d85b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.107.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db07aea0-ab6e-46de-bc06-85488b028176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39953c15-dde6-4caf-b794-62e14f12d80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690faac5-67b9-4467-be88-aeb555d0c4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f262f8-4ef0-4840-914d-37fae31650b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3437fd61-64ee-4107-b39f-464235efbaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac3f9b5-bcec-46ea-8132-c9f006ae177d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2545bb1-0395-4e58-9b75-51c5912d7045", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8c6ba0-8aa6-4d0c-80fe-e77794ae4413", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0040a2-33f1-4711-b211-f80600805427", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23e88e1-e6fa-4cd4-9000-9a48591c7fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3384bf4-5999-47b8-8f42-ba8b51c815da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b9ac61-a79b-456e-a4da-21d0e3859be5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.249.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4948c25-4d41-40bf-98f2-013bf0e71072", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.41.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b7f8fa-2f39-4abd-a45f-8bda4f87aaed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.64.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159e27c1-0a8c-4b86-87ee-f5089bf89510", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.184.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12e822f-90fc-4590-8625-2e9a1b8308d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.144.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e70ebed-4ba7-431c-8c85-5a77515f8177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.242.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fd68cf-4178-4814-bd4b-4e7c94fe34f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.194.62.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af85dacd-5aae-4902-8871-92381f61a73b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.231.133.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b62f96-62bf-462c-990f-f150aa3fe5f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.198.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be61e2d-4bc7-471e-b4c5-f3c272b9b966", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.55.144.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cb7b9a-5eab-44a0-95d4-07c14db814d2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.63.196.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b872c-d83d-4969-aac6-def8cd36751c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.106.25.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19014dca-0cf3-4a8c-92bb-ae20fa55df8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b387a8e-4121-4041-8797-171cc671ea0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8237fac-72a1-4514-9fb2-69ac0f6c577b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b27bf7f-e818-483a-8abe-1463a7819381", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.233.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5b6700-c60e-4e18-8603-d1dbb76dc4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962d857c-4caf-428c-a24b-d4bb64685bdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72553196-4c71-4a65-b6f2-19706be17bfb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.15.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66efe4c1-061d-463e-9aec-378c93aeda7e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.15.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86140bd9-8a86-4391-8d5f-992bcab6544e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.19.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202aea8f-63cb-4851-b3b0-850bd2bdb4e6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.19.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9846952-485b-4dc3-b443-ab27bb4651a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.26.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a616bc85-0818-4a62-92f8-ccb855c42248", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.9.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a7f081-47ea-4b5e-9950-492e41543f97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.149.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc2ade8-7831-4941-b544-f1e114ae97b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.112.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcd1a5e-870b-46d3-b117-24074d64b591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.119.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0069c130-dc2a-4e79-bbde-edd4bbce520c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.124.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9004e31c-8131-4bea-8d32-bbf551376cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.193.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9e5fc5-2fb8-4897-b5cb-c7aea1e34d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.198.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a2d76b-aa29-43d0-8193-43c9a7880c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5428a43b-4052-47a6-8267-1d822889503d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.253.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a0d5c6-e099-4708-81da-cd709df65150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.60.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff987c99-eb39-4d28-9a00-327368b4b304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.243.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f98520-dc3e-472e-b204-68f624aa3644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.114.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296c2e47-f219-48fb-a7f2-21628ea67911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.123.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b65f262-1ab8-42da-8059-9ed3335abe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.126.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689935a4-f1d5-48fc-be23-ac406d1a44b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.181.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86405965-0bf6-495f-8d81-4a5a74309134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.189.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498a26f-9294-48a2-9a14-2bf85a3f406e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.199.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9af67f-3054-4aca-835b-20682fda4c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.36.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b05176-8e06-410e-82f6-ab3076f90c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.63.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e0f9ac-9848-4718-9bc7-c40a146d018e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.166.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5eefe1-8012-482b-a6d6-6533d5627e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911d1e28-82d8-4a01-8b80-7074c23f4259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ea3a52-a543-4a7d-a73f-c0c4522fc6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fbeeeb-800d-4f04-b6f2-8fd89548eabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f168ad1-5c4e-420f-8a9b-a96a108896d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789982fd-fbbe-44c6-b376-5c5043d964c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac47df07-0dfc-442b-9122-e2a8bf6acf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de719268-849c-4136-8e08-12eecf9f07c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09914cd-68a3-4974-89e9-64fea61d9f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a92cb6-73f3-49fa-83cb-188b003122bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2075308-7b35-434d-88f5-e9aa5c2af772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a76b7b2-2fe1-416b-9961-4befeeb7dbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516b7ade-071c-4ec8-a561-a3745ac658e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bc4133-e183-4c63-8900-7429b09626d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d812b9-2c66-449c-a3d8-af6779b0a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8615e0-2aea-4147-894b-c535c3a003f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feccd79c-c65b-40f3-a831-f4af52afcf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c268b8d0-bee4-4e18-b260-19acac5ed314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183764cc-8364-4336-b5e6-1e8d6835f0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a9dabd-1077-478a-b634-86668cdc02ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70530bd4-a49a-42fc-a3a5-616912193766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c05887-25f7-4741-8604-b1daa187651a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fc5cfc-dc8b-41c2-9684-a04d34676a76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.135.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5547a7-9b6c-44e4-8c24-dd6057c587eb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.161.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfb7de8-8fab-4034-82cb-5ff48ace534d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950a729d-f8e6-4ce5-a121-7a15738f1d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.152.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcccfbf-92ba-4e3a-a7fa-0accab1a4edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a68890-f181-4fde-9347-1164d8062ba9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.107.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9afaf3d-2cfc-4f0d-a96f-0f263d64c10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.71.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379faf82-44b7-4bf1-99e7-bfb01b129a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.213.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c87d1c4-9274-414f-b0b4-7192e6a1a5bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.104.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d120f0-06f3-4ffc-a338-6eb73e736f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20ff63c-3134-4d18-8787-55e58af03777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d1601a-a87e-4338-8729-ac55b4733448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.68.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deec469-b3b9-4029-aca0-6eb97b966549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.89.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227645a7-dce8-4b01-93b3-93b20fc480ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.197.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c991a1ab-7a33-433a-a0e2-a529a34332ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83e410-a442-4b52-a48a-610ba8633eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0b6a57-cdf6-496d-91b3-61e0ad5f8a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa8532a-fdeb-4614-958e-acc7a1c01262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf5812b-f66d-4be6-a2ec-ada9f2d4ef8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.157.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a251c73c-d7ec-4b56-8c0b-3c216e6fca2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.171.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8248b0fa-7425-4a01-af00-ca403c86cd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.181.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6932c898-2f25-4325-b0ab-011b7b39174a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6639a4c-e027-4f15-9639-d6a78999af0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6a098-b3f2-492d-a47b-e361c91667ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d762ab91-a57b-4fb2-a83f-c40d6fd9b2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ea5bd6-ca7a-40c7-8060-6ec63ad1986a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e196196-1454-4e91-8277-7df2a4d6d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410c55d3-4f14-4cb4-a350-799386f55627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab6ac4e-634d-45ef-b8e4-b33e30da8e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d76c82-7260-4641-baee-97eaf97bb0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ff0631-c09e-4b36-9b9e-b8b1f6c3bc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0769451d-ac5d-4709-b66d-c26f0f64259c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76dee4d-84ae-4015-a22a-96a956132bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d34aff9-4781-447d-9828-3af3d7ed1c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a2733-c2a5-44ac-8d76-ce1efe38bd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3d2c95-b2ad-453a-b501-54ac194355e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083d71d4-f2a5-481e-b437-db4424d0591f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4f00fd-1cf5-4861-ba06-ae2bb5703f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eaccb8-ce98-42ec-a959-c4a22ddd7542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922be6a7-c72e-4520-a0a2-277f9e6e9d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd19016-e6fb-4a48-aa0b-2054442dacaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a08d8f-2af7-4dd0-835f-109e8451a910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf58f95-3feb-4e41-a2a6-b132143063c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae03b8d3-4447-48f6-a0bb-18e065645070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835afbdb-459a-4a9e-8154-96bcd26049b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19f073-f0f0-46de-9128-82189446912d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1ceb89-f81a-4024-ada2-7e998a7751d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df092af-b288-49d1-9bd1-de8e5db805ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e024f6c6-ba7f-49b1-a5af-86d77f7cfa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454c2221-fef0-490a-9dff-2b45bc789582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fc0c45-23c4-48dc-9f0a-f05889cf841f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be99bc2c-92b1-43e3-a267-d4b8d974a006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0476bd-83b2-40ff-90e2-2bcf1d079899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373aa8bf-6e5c-4de9-a653-592944a3622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37043ac-6c57-4569-9412-9a9eaf9ae011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96f637a-f2e2-41f8-ad9c-cb9de18c1afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310f4e91-2da3-4f23-8b0c-f73586b80454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d529dd4-90fd-469d-90ed-c6bec786d639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b541b5f-9056-43b6-92d6-8cb17830d690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d38a67-41cc-4844-8246-d15221751db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e84c084-fb02-435c-ae97-c4fbd617c8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a524d581-eea9-484d-a2e0-4a141d746171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839a396a-19f0-40d3-8f05-8c2764b3aa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d61db52-918b-4f80-94c9-d289ef97481a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da731a65-865a-48ac-bc88-7a1b51b0f280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d231845e-c287-454d-a11e-7f7218e22d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5844ea98-5660-42c0-8780-94a2d28fc995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ae70b8-4b24-4fbf-9a80-28b36a720923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c278e9-f7a6-4aeb-9172-eaf668d3c1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acba5ad2-2a57-4c63-b74f-b743fc383cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d386c2c4-c278-4206-bb90-962efdbd5de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e826176-d8cd-4696-9cce-983e34a7ac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40c21dd-78fa-4ee3-b042-7bdca1f97736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6ab8bb-43f9-4ae4-a3e2-90d2e2918580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52717ad0-2504-4db5-b586-4ba7788c5b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76906cd1-829e-40b0-9cb3-b8a09f882ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0316a4-240d-4b67-8d7e-01be50e0f36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdad7970-5d6f-45fc-bada-6595efeda4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ed3cb-00be-43fd-b802-8b85a1667985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507017b4-713a-44f6-bb24-7ccfa2a0a795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcce520-936a-4884-839e-6f26ef084c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a60eb8c-c973-4b4b-9637-b708ecc5bc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1506584c-afd0-48a2-8594-cdda8b2fe867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7de3d4-901b-4704-9502-958c6110574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebe5e80-407d-47cc-9dcf-989129c12031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c251dca-202c-4a54-96c2-7e7ade3be266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937521b7-41a1-46bd-a4be-bd0f345ddcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5ba801-0443-47ee-9461-42756ae2a346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5466be8-da16-438c-8b17-2b7b99f6f532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd165650-54b3-4d29-9314-ec843e66161e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce9e080-cf4b-4792-854f-8bc1549e97de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be99d9d-0126-4554-ba6f-7e2792a952de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8067cfc-2f7d-4007-8b6d-341eab9e398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca36eb8-706c-42de-ae8a-0baf5b546308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d7e239-1919-4aed-b302-8877895ad714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfab630-3723-4219-9f7c-1e570dbaa8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7e0387-f511-4046-810c-be5ecb4fec9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6d8d6c-c1bb-4796-8112-8392081d675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3bf800-f1b9-4bc3-ba37-78eaeabb88ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c25d33-f517-4a53-99f8-da11b2561726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a819b3-ade3-4d3b-a635-85f8f42a6da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4e8444-96b0-4e4a-b6c8-da33064f8c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83420005-8f38-4f6b-8907-8a5732bd9002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642e2393-7f73-4242-b9c8-e306a7f5a711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9c8292-f475-4ead-accc-ffdd6ac7d510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3731286c-5620-4555-a7e9-4b672538e652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0029315-5ce2-4e72-a41c-b59d0ed4342f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774d57e4-d09b-439c-9c3f-868fa4d8f4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1595dbfc-55ff-4dfb-812d-042ca9177566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c24dc95-79aa-4602-bd25-af42ff1b9d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062f4799-4b98-4a12-be4c-60441f1b9aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.230.143.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5ce776-0e5e-46a0-8db6-ec80e552e870", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.132.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733b666f-3023-4174-813a-d4d49e968268", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.118.68.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4ec4ac-edcf-4ab9-8645-b79f5826b3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.241.27.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6426e5e-e890-4a9e-944b-284a52be0c88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.160.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803d573c-81ab-4244-ae25-27bbb2e8bb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.95.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67995fdb-8dfa-412e-ac10-660474e9bdc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.91.97.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c35d4e-05de-424e-9be8-dc27286bdf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911a02b2-13fe-4c9e-8185-aac27e3400f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1569487-9c8f-409e-905d-30496bca199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4491eb-dbe5-45a7-82f1-27230fa69e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a4974d-a73a-4bc6-a28d-cfa3a4fcace4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65aa48a-3a1a-447f-b147-7587a0540a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854d52b6-44e1-4b38-85bd-780cbaeba5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d56574-66c4-4bec-9407-1adf2ce179ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5452633-b815-4bd4-969e-18915431151d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20744cd-840a-42da-b206-41a293e1ecf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1838a0-50ff-4950-86d9-10618bd955c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea06ad92-4e59-4dd1-bfa2-8c700bdef875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b798ce-436a-4b3a-be7f-da8f76ad8350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d102f3c-acea-4703-825f-24917b6aa143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bbc5e1-b8fb-4410-a326-d476fab40d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9f073b-19e6-434c-8539-7beddd113c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a3776-67d0-4aa9-8d38-524a2415c14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4530284-9b0d-4a2d-b94e-1c0829de1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae30ee5-e91b-43a1-8966-d1712ba8c051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737c134-0344-43b7-8782-f4497213ab03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a2b31d-fa10-412e-87a7-2f7db7b9f56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacc2543-e9a2-4d0c-959c-289d0418833b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4eea6e-cf36-4a1c-8b00-1b4002baddc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357c1c97-466c-4404-bd48-9b14cb039f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff227bf-a834-4d4f-a441-a6ac549cbb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5333edf-75e6-40a1-b823-066413e17abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54156b-0d34-423b-b464-1ea0a6ef7a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9d60ee-1117-4f01-a803-650e2070962a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bd9d59-aa1c-44e3-8485-8d8c35008b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cae7bbe-eb28-4c9f-9d2f-2c9795324b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aeaa40-b085-47dc-9110-4b18f8297e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53691f9d-04b5-4cd5-8e07-545657374c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147768ea-dbff-470f-a172-c4e79d760530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5306b4dd-8981-4391-9908-4544bd6ee878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53da6cd3-4bf5-4983-9c36-1e3053249a31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.65.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d705aa-ff63-4afe-bd38-befb38b0782d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dbce2d-8caa-4dc9-801c-c63c18f6e6ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.77.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ef7dcd-5174-4838-bed8-d413edf8504f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.95.83.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140970cd-9518-43b7-a789-3dbcf40dc1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107477a9-f058-46e3-8b18-9126c1bb7c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7918333-22fd-494f-b42a-0085c66d4631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede25b03-771b-4bd9-868c-e3400dd6f248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18b8676-a455-41c1-b12e-caa6c0f5140b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f40c78-b8f3-4b56-a085-86bb8ac1b3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec72d4e-6ed0-4242-8d9a-685bf528c42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efb2b74-1bc9-4c47-afe2-e0ad9e88109e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6a454f-89fa-4f08-8aa8-ef238ec43586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e39cd51-db4e-4bd8-86a3-36363af48ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54445ea-9b15-4568-ab89-572a166708d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c086c2da-d746-4c1f-9613-a06d6b0a0559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2ede06-ecd3-4e4e-9e3e-40eb336c6a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b04b18d-1707-49e5-a15d-ce4bc69741a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc5964e-3dd0-4c9b-a798-0c539dc612f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a2f148-c525-4993-b506-9db63b5cd306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21cc6f7-eccb-4f1c-ad00-0026d3b96d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cf890f-b181-4917-a598-607ca83de37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf5d075-12d6-4ab9-bcc1-ad9f0c17eeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e4be3d-089f-4d9b-8e18-9b43fda11c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05a8bbc-a840-45f9-8efb-b2db7e30bc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70239443-d303-48ed-b49e-f979c271e864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba97ef3d-d622-4874-91e2-98355e10b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d520d786-4c3a-4372-8665-26053957f3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b93cfb-bd96-40f2-b2d4-45cd1302ce8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7989ede3-3b36-4e92-8b8e-68b959f0c625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8078e0-2aa4-4285-af65-afd8deec7e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd794e4-8a8a-477d-88ba-dd1aef24844a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf817e6-52f2-4316-92ba-8bdd9ab93523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26071f89-571f-4642-8792-8a2856d86777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4381d7c6-444e-49b0-b6ce-44144937cb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415c55b-765a-4614-abcd-b7d822576be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949e53ca-3cf4-467a-a956-345bdf9c16fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f0d868-55f4-49bf-ada1-92883b2166c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330ecab1-9d8a-46fa-b51c-3bc3114ec3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e64d36-c09d-4bf6-b9b1-6646f3ea56de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c592a01-11b4-458e-bacf-b2c89b187def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f37ae8b-10ae-4a74-9785-083105e74460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615b70f5-941a-4fde-8f09-72c56c1ab25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa93f51b-b5e2-4f8a-8c87-0653b0e6b181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0ea391-6013-4ed7-b753-f640ec4b54e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ee84d1-9ec7-44ee-b994-820ad262d799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e1ccd3-66b5-4fad-8f96-af593b3c65ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d588085e-8e1a-496f-a48a-5178080df199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f7fe45-d520-42d2-9474-13d9bce98e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370be153-e344-4fae-a206-a9927a550234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b655319f-8224-4912-b017-2bf10b6cf0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c2c9cf-752a-40c3-a5ea-bf3526d518db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f0a8b1-d1cb-4bc1-b93f-834846d58f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44197b9e-9a57-4620-8e2a-e1bd4972c5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0560712-9d7f-4704-bc6e-c7fe11ee52dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb86e281-c22e-4300-8434-66e5959f43d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2176a736-c243-4a21-b74f-c2c9cded3fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac9a7d1-af5a-4df6-9e8f-306df38b75f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f3761a-5c61-41db-b64d-1cadd14ab722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb524cf-de2c-493c-9edc-e6c440eca5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129c74f8-33d7-487f-b673-f2449f2a00cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6447f70f-862e-4321-8f2a-90a0ffda772d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba573102-cc77-45da-90b2-0d8174d684d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c5f815-a96e-4166-963f-9853cf784f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8138250a-ee10-45b0-a231-88ada457cc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05267d8e-5366-4c41-af0f-dd723ab10d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998d0d07-296d-4104-ac44-4e7207cb5fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a2b2c1-7dd4-450b-888d-76c4891522cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc48fece-c8d8-4deb-9282-15842d608d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afa09ff-d75d-4f15-bdf0-422d89517d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dc97be-debe-492d-b8af-e2e8cfb653fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1897e2-6dda-4e54-8d3e-48388a737dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dfb4fe-b912-4e7a-8549-b38d08cd3f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bb0c0b-1695-4758-a6de-83e99b57a941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025af6cb-568f-4281-adb9-6661b6b86ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fa6de2-2592-4064-b03d-2494c45d1e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a80ca99-c67d-4893-8f47-522e4934f380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469e0495-30df-42c1-9d4f-25f87851822d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60476a7-eea3-4126-87f0-38de9c5eba70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eb1c29-3da4-47b0-af82-36003f3d9553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e192833-70e8-48fd-a302-7ef45382107e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40987b5c-f445-423b-9207-de1f292b4b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26243781-9b7b-420e-8272-677f0bd474b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04979032-63a9-4261-b7ad-be756a86f275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39133f89-e13a-4d02-9e09-d628626cf7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d097a64-0a75-42f1-97f1-06352e7286b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789b741c-4317-462a-be12-15d7d6f9b9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcf936e-b09c-45d5-b09d-da1635ba6b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9727311-699a-478f-90a4-0141ce2f588e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ca2cfa-0de1-4eec-adeb-a331c517f59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e0e1b1-20a7-46aa-a58c-1b22cd557b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4638e0bd-259e-42cb-8f26-31b0a0ebc654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39921875-5311-419b-821b-d98cd8994cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad38a14-9037-4b90-9ca9-68ff6987ef35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c70c0f-c00f-4046-9c2f-a20c61a896e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d124ed-7a0a-404f-b044-0d0e49a7c89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc013d6-7a2f-40d0-a768-1ceeca4cf767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50601ae-dfc1-45e9-ba49-44eb70cc4373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22978bbb-3baa-4bc7-9f9b-5e6a593abb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c3093b-cfeb-40f4-9d90-fed279c0594d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cdcb7e-d1c5-425b-849e-3c7570a85a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f884d934-33e0-4c40-9b80-80821935e359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfedcced-9949-4c69-a808-3b900f2d5d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a1035c-a0c4-458d-a208-b3591658e407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4d77ec-d091-429f-8aa1-7a020c68d5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc97f55-de43-4cb0-8eeb-9ba6f1fe19c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46ab1c6-aa1e-455f-8fd6-b5e962cecff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7a2731-246a-4c48-9fe3-d0b979699643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b851c55-dcdd-446d-a463-4bbbd421aacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657a2ee6-2c03-4779-96b1-1f82fb079f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a771e6-5fcb-42ec-b317-4c42697109e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dd0e43-6152-438e-affd-00608ad6ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b925c8-c401-48a3-ad2a-ff5284605a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa375053-4975-4bff-9093-0a9461716e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c426db-e562-471f-b355-d21f028953f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd5ebd0-a09a-4e9b-9da9-533d7753e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa44523-8eeb-43cc-8910-c70957d76330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac3a9e3-5c19-43c9-a55b-3f955de3e865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8433b56d-3ac3-4c8d-ad64-851be781914d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8c27fd-1442-4f3e-9b80-a291be20f592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d660bb26-c588-475f-9ca9-02a8e2b0a463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04b6a05-f35b-4e72-965d-b09a7f2d6861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf21cd8e-0471-4d7a-a0b2-016a3dddffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0350fb01-1d69-4255-b4a8-4a57648246f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.252.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5461c340-e820-4a71-afa8-231064eb51f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b4c30e-f0f1-4267-b4da-d9f2bc15518d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.18.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81cfb85-5e2b-4d04-966f-f89d3cb9f182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.41.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ab18b1-21f1-4d93-bd9f-4d6cebc03389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8301c5-31b7-4a70-8fa5-f9a22b033f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.117.199.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f0b8d7-a52c-4638-b23e-facb14860b94", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f350d7-16cb-48ae-b09d-55a5a356737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3468d3-2c25-44bf-b422-bf418e02bd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf98a83-fe75-49c4-b82f-1a327251311b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e40d844-008a-47a9-8802-ec25b4a6d3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d601baa2-4579-4bd6-807a-fc15f86f75be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4775bd3-4a14-43d9-b02d-c20f5143e1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44a0d1e-9161-4ab5-8764-de991591d233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0709cb97-1b47-4677-8f06-a5f94f59291b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921e32cd-8bbb-4567-bb61-2783ffa35bb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.211.2.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed3f9f8-8a31-4353-9a1e-c5b78f0ca8a5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.196.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c39d34-562d-4ac2-a0a8-2f55191a5bd4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.12.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294380e1-2b03-465c-be7e-5d96f4d66dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1bd799-2faa-40ef-beb4-8df673193c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e253c28-661e-49ce-a557-d97a45969fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7706f32-5361-43ac-bd58-e76b2323578e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bce49e-7453-4c00-80ad-0333ea91fe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f358687-1ad0-4ee6-a798-5f390ea8f0b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383da9be-2deb-481c-98a1-5a4edca02942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c4f28-4abf-41fb-bf71-7f013fad1839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c55bfc-a554-431b-9dbe-c4e1f0e813d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21a45bb-c1ef-4811-abc4-da754cc44b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1728582e-8630-48d7-b2a5-5555e1a33e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a133afc4-025c-47c4-b4bb-6fce8f9c0398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26172b5-fb61-4b16-bbb8-bb83045c8c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595fa802-1077-428c-a010-3fb87ffa6c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82569f5-f0b2-4270-a290-107eab995330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28085994-6c9a-4dad-bd1f-f3cef2f2b298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fac571-cd5f-4b5c-b0de-8a8a9cbd15ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4747bd-9f33-4130-aeb4-3b44f7fe152b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d10ccb-822a-400b-a383-51b306759bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3764cb62-0167-4191-9d6f-ceff585f50f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.245.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73590669-9bbd-4ca8-ac48-7a630d055ca0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.21.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db134f2-915f-41db-881c-f85c49f20f9d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83646301-89d4-4576-8203-d2549efab8cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.236.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5e9069-7701-44d3-8d6f-65d20881190a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.253.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0c0578-4adc-4aed-8973-9d06a5b90651", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a489bfa2-fbfc-420b-91ad-ac98f334f0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06c58ec-c785-4972-9baf-be9f269dd907", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd39d88-48bf-4a1b-8caf-bf137525d4a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c648b9-42fe-4638-8c5a-e80aa69aa23e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.18.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8f79e1-c8ec-4a12-8943-ae5f49bf40fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.208.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eb3f7e-32b5-410c-9521-b10daed16246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.228.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e91896f-6a89-42ac-8166-f1ca2afb0c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.84.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c6b159-ced0-44d4-846e-e0836b7021a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.90.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb823751-c13b-46b6-b7c5-771684f68544", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.123.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfc62a7-9322-44e2-9631-fb1816d1476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.175.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7104ad-6185-42b4-922a-43f31b78f50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.84.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308d3fed-4e14-4f06-836f-99cad376ec05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99be1c51-9656-4360-bbb3-38eeaf438b05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db59c5a-3110-4aec-ab85-936fc1b62086", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cb7615-54f7-4ae2-9f60-0776b6cb2d07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3954b5b-f48a-49b2-b0f7-902405575c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db8665-b652-46dd-9f79-21ee8baf7225", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d7213a-9c84-46a9-9ec4-98bf178e17ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190e0fef-add4-473e-9b95-8dfb9d373c08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d725a5-cf31-4d34-99c9-6d2692249df0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1d72fa-017d-4b61-a2ae-ef49c891ece7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c37649-db09-47bb-a984-23ccafef9212", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc166f61-d254-4d07-baae-876d72d85bc5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.26.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304161fe-808e-4e4b-a075-5929126fa1f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.140.166.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8419335-9486-45c7-bb0e-1317cad3a28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49453cb-cb1d-4664-894c-e3a52b7d0eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.31.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df58f9a0-d51e-46ae-a5f5-1664157e7b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.102.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca02c61-408b-4399-abe5-580b67c96469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.134.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bac40f-3277-4686-bb3a-744a6eabcdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20332474-027f-4475-afda-62714d0f22a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.163.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79153608-f012-48c3-a29c-3f08eb1a5c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.179.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d7681b-e233-42b6-80ea-901b71de5ea9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.59.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16263fb8-4364-43d9-a37d-8c0d4decccec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.75.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41972e9-fc40-41e3-8523-8e2e3361f63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.99.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1efe68-6178-4004-981b-24a16ededae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.99.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e8d4e7-b795-4794-8340-584440bbb2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.108.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49930c6-6ea8-486c-8f77-0f9e933f14f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ac97ac-4517-4c88-8d0d-5b0fb59486d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2357d31-74cc-4a5c-b32c-878f8f40caa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.219.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7310b9b-772d-4e6a-937d-8fbb4bd48a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.230.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8442dc29-ec8c-48bb-a46a-cbd410e91e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.235.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a5125c-983b-4973-ab6b-4c47d6346b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.238.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e536c4f-ae0a-4ae4-a592-0fd1d5b6d01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.239.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67901ae-d6a2-4722-92d7-cec6b11ae9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.86.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15d05f7-ca04-4b0b-9b5e-195e4cfe6d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.113.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d847bff-849b-4ed8-bbd9-fa9131715c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.224.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15553418-549f-4f56-9456-2555dcab3791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.231.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3b0e24-23a1-4e3d-9f02-2b0d57bbbcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.238.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088725a0-4e70-4e5c-b5ed-ddc7e70a6097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.49.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d41d21e-a943-4f8f-babb-bc2b4d6731db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.81.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99db75fa-966f-4c13-9a03-0ab3346c9f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92be4e4-730a-4aa0-a66e-7b1cd978dd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1636d0c6-4476-48b3-9cf6-ed39bc27c176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe2e460-e0cb-491d-bad1-304854951f73", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04be0e2-0e76-4992-90b1-dbf5294811e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.69.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2218527f-77d2-4a4d-9c39-b1713fb93c00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.5.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6172ad3e-e636-4780-a77c-6ad3271ea560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.172.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d689c017-35e8-4163-ab34-615078e61149", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.139.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd13c30-5639-4737-8b91-547185eea7de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.10.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a642cb4b-8d80-46a9-90fc-2232ce5eaa94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.107.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f12eb7-43b5-46be-9e28-c8b45ade7737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.11.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496ee2af-7b5a-46d1-99f4-0a8f21087b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.113.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540fe1a5-8a0c-4c73-942f-f50dfbbd558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.121.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607b670f-b84e-49d1-991e-b6398c2341dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.180.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75919ff-6fb7-4392-aba0-36befb531d2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.232.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283d5198-7dd2-4d92-b634-7ad3975aec94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.50.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca723f9d-84fd-449a-bf2e-bec9b94479bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.50.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca7edf6-da01-4414-8312-b6f15e3b03ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.114.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d547c8-1d99-4084-824d-5c9d13ad7375", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0491730-b05a-4bf6-85eb-cb7e94449958", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.100.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feb073f-e88d-4d78-b274-d49158eef50e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.100.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f97a871-be6c-4516-8a35-1b7bcd8c01e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.111.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9dd47a-59df-484d-9797-926a196b1b0d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.116.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba02350-9331-41ce-9f60-50e5d26f5b4e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.117.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0069fa88-b577-4a27-9731-50dec429a06d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.134.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1214ce8a-cda8-414f-b6d7-ee84e83d0750", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.145.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400021b1-d19a-4033-981c-f13112bbcd92", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.153.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979c394d-4931-4c09-adc0-ec143be45d0b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.197.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca689f55-f175-418c-84ec-2f844fe9c1d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.204.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0facdc3c-575f-4473-bd7f-09e3ff75e535", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.213.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0346424-63fd-4013-a81b-e72c266621d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.232.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2ba3aa-6a78-44fd-ab1d-fc1bc66efd7a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.237.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b9dd1f-42b7-4ea2-879a-5931db172563", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.34.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f0865a-0e84-4396-b39b-3d84842f4df1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.35.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01209c54-f3ad-433a-917a-64734e4be711", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.35.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb4f09-cf97-4cb1-8a40-dbd37ca9f033", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.44.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c7986e-a47a-47f1-a0ff-b0e0db5fff4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.49.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeed9701-5f45-4519-a6b6-75e7d375b9a2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.51.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcedae7-3ca3-46de-aa7b-96dcf52a09a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.53.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366f263c-52d9-4c28-a572-ee26b70e3b7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98833216-60dc-4a34-8ae7-ec5b32061a0b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c2ca8e-32a0-4bca-89b5-c0b03f99f8ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.64.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53339887-4f76-441e-a596-e3f68e787090", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.66.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece33692-e3f9-4b59-b3a8-9f112adc2851", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.73.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1992fcd-a727-4767-989e-dac8e3c0af61", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.78.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2af547-46ce-4bfe-93c6-a450b94488cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.93.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16434e05-32aa-4940-af68-b20eaa149e51", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.93.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ccf9d3-920f-4db1-855f-afd0c41dea21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.198.46.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be8a247-6176-4f54-9468-4c61a47a11bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.126.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca163e3-dd0b-4a84-968b-3fecce53b70a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.22.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ad81b2-eb97-4734-b337-d3ce2fee22dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.22.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced2a9f4-9008-42e5-85b6-9f2829885c90", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.24.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c70db3-0844-41d7-92c9-ef087bc576c7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.6.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb57b9a-d4dc-4bef-b954-b90c9392c352", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.9.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1a1467-ceef-4422-9b1a-b39dda8039fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.215.135.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0848ff-2d8a-47b7-a681-c258c9b7d7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82337a00-9b48-4881-a9eb-e58d47acb19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffc3555-c5e3-44a1-be0c-b36015dac496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac6b47-a674-410a-91d0-0685a06b31a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8694722-56b9-4496-b3f2-6555a347a02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7877e62-22a1-4b10-9ad7-194bac41d68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e45494-c999-455f-9edb-24dda3f39a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b2fb71-1139-41cb-917d-94b658424917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c20039-832c-4ff9-858b-f0da545c440a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca73ea9-1db6-4335-93c4-81b818a52fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48868b14-90f8-4dfa-8646-11f92ba8bdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8512669-6b8f-405c-9ecc-d2c72bc38e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487606ce-5ef0-4fc4-960c-03e4a261d5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5c26dd-3cba-460c-b038-64c47e373769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f7fda8-5ed3-4f46-8dbc-fb0675ded801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b676b07e-92b1-43ae-9475-e5f9747ed564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100b1b0c-cc45-4d8c-b1d3-742114113a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a897fc26-fae4-4aac-83e7-0f88758f1b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a094b9-3d71-4648-8a70-37ec862782f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19592be5-2cc6-4db9-836a-04c79f562d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cba6d4-df85-4f69-8a0a-c238ff3ffc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07414293-881e-4460-b4da-0e0e85b9f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fecec3-21e7-42a7-8c7a-8113e2bc0e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead61772-3f3b-49f6-889c-ce748d99ea61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44f85d1-731f-4901-ba89-14e7ccc34797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0770a4c4-216a-48d9-9dc5-0afd0d5c7d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3c6937-f323-4f41-a95f-3aa33e2556e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9abdb0-7442-4f5a-b0ca-6704e3a1cce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41148db-1faf-4812-a7b3-a6b1ef4df55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d752ba-ed9c-4f8b-9e86-9ec5a39e753f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8e44bf-8364-4cc4-8995-cfa8ad3c04e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e883e851-0763-46f4-9865-90d2101fa41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6636aac-81bf-46ea-9db2-f35e24a9f449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c1fdb5-bd7e-48c7-b4c7-9916177b413c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5b96fc-b2f9-430f-a3d1-3340efbd8a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5e9cfe-967b-46ab-b222-56e0638f04bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fba3e4d-512c-4dde-aed0-eaae38018c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e696a858-54c0-4e91-bf0c-7e2a4c22d2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40731ab0-be4e-465e-936f-a1023a1847d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c53d64-cc2e-4039-b036-63dea9e7e2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda8de6a-a555-4970-af7f-87e3256aa437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a760a1-2002-491f-8b6e-455d4be6acd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70e99bf-15be-4430-be98-24f615083e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60d5de6-181d-4309-80a4-7dc18c7a82c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1534039-87cc-4b9f-8c9b-3f1b08bcae43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814eeb7f-e2ad-4326-a601-54a5a0e858c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb8fa44-6f86-4a36-a7df-695d240cec87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11fc197-5644-459c-a7ef-73737abcd2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139c40e6-ef31-4b12-a0ca-796ebc99592b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d97e34-e2d8-4d5d-927a-70aebddb8b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e7b1f9-9119-4d2c-a9bc-a39d258d0bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da210666-f658-4fbb-991a-e6f39e5b563b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3e4299-30cc-410a-ae91-9a734fa45bc9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.179.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fed9f2-9bf3-49ff-8c49-a83e9e8de5e9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.211.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1335b7c5-febe-4ae1-a806-3cced31b44c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.218.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07688e30-db13-4f7b-a0d8-aadd12f8fd50", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.44.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374d2a80-1301-4941-8b1c-c77e855b8bf2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.51.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe396e2-d218-4751-84b5-9741c200a587", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.71.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b91705-109a-4a41-9d51-7f63f599fca6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.98.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7775b818-f776-4520-a7bf-3d8d62a1c87f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8fe244-c9ab-4891-90cf-e76cde90eede", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079f449e-8f8f-46aa-8d2f-b5690d048e42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aef5f0-d641-4880-8ba4-f5b097e85c4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e20cfb-aca9-4ac3-9700-e0794ac0c5d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.129.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d64395-0292-4213-8c2f-174b729c6b20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f63370e-86f1-4584-9d42-2a99e2b2ba40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23723f6b-b44c-4db6-8e2d-b7d04075b9fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89699ed-cacb-4ac5-8356-9516eb1185ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9400e40e-6e7f-4def-809b-da23279d6970", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b06a02-8596-41d7-ad43-f14ec3a96e05", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.176.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c285f07-9c79-4867-b325-76e549ff68f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80637ad-9905-48f9-83bd-90ab4ab41ce6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94906cb1-af0c-472b-9feb-6b24cbb34a86", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae9ab3c-6541-47e4-822e-aa0ed7732306", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ca3041-f07c-459c-86f4-f516d5178cac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.179.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8607bc1-69d0-4cf5-93a7-4ab0e5e603e1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccf3e8b-1b69-4344-b493-832bf382801a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed965916-9c58-4dd1-888a-7ca20323b2bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934b61e4-6a79-46a3-8c5f-77381ff9dd4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438c1280-bc0a-4a14-8ce8-8b9238deda60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.183.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f04e02-7dac-4600-ac74-4d2f8347513c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.192.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a22f8c-c42b-4523-a14e-2202c9df0e74", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.192.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3fd83a-4d48-48cc-b645-d5a47e40ce8a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.233.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac00c27-d5f5-4ed4-bd4f-792dfd47c54c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8743ce8-6ba6-4295-8a61-374b97c62d2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6528f839-1b55-4252-a8a7-c1439ca0f2e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182fac35-fbb9-403d-acc3-0c279ce0ca33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.236.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7886a78a-0083-4cef-8e7c-a84039177ac5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.237.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa688ea-f1f0-4f1a-9d8f-4728bea0d2ab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.237.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977db999-d0c3-4f3f-951f-65377a7b7348", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.238.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f096d5da-fab0-4f86-bb3b-9137a0250b23", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.238.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f16c3a-8a4c-40fe-8429-2582e0c90b97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb57462-307a-4330-b7c7-cbf280c95f1a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e9049f-5e52-44df-b5d9-b7df3e88a4a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aae94b-22a5-43d0-8e80-2cb3e1c6e618", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8bdfdb-5f2a-4641-b77e-693e509df0ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.33.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe43ff80-9f85-4c56-8df4-58be96e9ef08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.33.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf931b3-3cd6-4378-bfdb-52302acb6e8a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.35.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b60c88-b55d-4d5d-baf9-bb94626eecd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.36.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aae0141-1b56-40af-affa-47ff0e6360ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.47.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51bd793-c710-468b-8b33-43b79ede5102", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.51.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0567b0a9-8b60-4eb2-89f8-637354413ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.160.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13ef7f0-4779-4e63-920a-660626d5f66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.234.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b39d8fd-1c02-48d7-a081-7bb193935cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.0.65.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f6b25f-9b4e-4bdc-85d7-ca966152b5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.190.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6781b907-f437-49d7-a49f-c1b7166b1feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.5.210.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218f174c-3248-488b-ad8d-248342739a94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.212.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91d183b-688c-42a6-a26a-531c5e2b5878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa3a4a3-856a-41bd-a6d5-963e49f3db5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ac8f6c-34cb-4065-b7b2-ab4c334060f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ede295-78a1-40cd-b256-84f813f1beb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa5e3ca-1454-45d9-94a0-886b161b56f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c103508f-4c51-4dd4-9c63-f933482c200a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a477e1-997b-41ec-ba7b-4991710413f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b1d463-1468-40a3-8652-fed4160bbd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebcde72-b419-4f6e-80c2-a3c1cbfcb4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e331895a-d500-4e73-a16c-875ee207696a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9b5644-28b0-463a-8ae5-be3afc474635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1275bfc-05eb-4fe9-8d50-81c8a5dd0038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe06dff-3c1d-405f-b79c-7f3b7a424b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52671c48-d146-4cc1-bb22-7eec06c988b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90e304c-657e-42b8-b5be-9c5b1ac268da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72284aca-cfb9-4ea0-818e-41796af97098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adbedae-df20-42be-89c1-50bb9c4392e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cffe66-7f22-4644-b6c7-92124b0dc33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924e894d-65c7-4380-a93e-63509e345367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aadf5b-8033-41a2-ae14-66d4fc2f6d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcc0027-2afe-472e-ba3a-f6e51ee0b46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0733b25f-f8ad-4b07-8e4a-ba69f0bea26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298cbdda-9890-421a-9f6a-f9b007ba293e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2826c3-aac9-4de3-be94-3805600a6186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c228c9-566f-44a4-80f2-01ca3af17dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969cd5c0-b669-407c-b6fe-3485fd4eb860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6d4ce1-9a1f-49b7-b31d-bfdc9212fb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817b115e-9dc1-4b5a-90b8-e3b3707ad63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9ed1b8-50f4-4eb7-ad89-ed25f652feaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ab7f58-6869-4db8-804e-1e163c334f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd1f42e-ac9d-4dff-93af-0d5609fd7818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84e375a-f325-45fd-9a3c-969c94abea5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613d985c-c19a-4861-a954-217b2475c520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3ce253-896f-4800-bcca-fed6296f15be", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf13930-c0c1-4e24-b6e2-c117a7913949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bfa0a4-1597-4dc6-8142-f1b31bcca4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87e27e3-2cb8-4c09-a926-847ff19cf7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1b9724-e4d9-4f26-a5b2-9f589f06336d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c79138e-becd-4731-a480-6b9b61ffa561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35de79c-acf4-482f-94b9-7f4eaed99d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb19e40-81b6-431c-935e-ad616fbe5cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a84ef9-4bdf-46a8-8db7-40b2898fafdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2e3e60-94b1-4d03-9339-0e2800caeaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b1a17d-4ced-41b3-80d7-27e2c5126727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250a9c4-a200-4778-9067-4c6c20bfab83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d907be-e458-48df-845b-d501bb44ca4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7288858-ae2a-4684-b83b-d18e6ae8bdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa9fcfa-034b-43db-8a84-8fe32be2c2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e924f86-5daf-40c4-945f-ca9199eafefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afcc301-dd00-46d7-9ace-64bce67c88fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b0ddc7-322b-49ca-b1ae-d1b900237bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd554a62-7cf0-482b-b57d-b5e7f2cff2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227a802d-e298-4e6b-ab15-f5befc7e06ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b6fa38-aacc-41ea-b91f-c6858fd619a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160857f-c044-4faa-b8ff-01fe54a0f3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc726a9b-a71c-48c4-b408-5e9b80a9d9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d01161-6dfd-459d-977d-01370134097f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f4fc71-227e-46c8-8002-edf6c5c549a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed76e5-ac8d-48da-b7a1-3066712a6b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767376ab-7d77-4512-b1f9-92dafd74be7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214600c8-83a0-4322-ab37-3d210ba3618e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82094f74-be19-4ff6-8bc8-ceca53cd23c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013ba3c7-d71f-4e0b-8eb5-9e717d363414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684b7615-4da7-4b5b-8c34-e3ac44634a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e8d64e-579e-4fea-84ae-e07f9e031826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27abc732-59b9-42e5-a489-8f6d35d9d41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895c5007-e36d-4d32-9c0c-f14e2effacd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a29ed5d-ca4a-4817-a9b3-e1ad995a3968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10881a42-9b35-4c39-a765-cca43eb91267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc60a77c-3b29-4c29-9f1f-032d8304d2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b8f0ba-6395-47e1-89e3-154c0c44b15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1608c8-d1fb-440e-ab68-440bb7aa7de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab6d946-c319-4b2e-bff9-3a6e74885db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02623bf9-8ab7-4e63-918b-c30778256fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd577793-4015-4c54-820a-4beaf01e13d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c652f6c2-7b9a-40b8-a12c-00ab20a82e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e86666-432d-40a7-b55c-391a0abdc40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c773f9e1-8bef-460a-9410-8a068583cdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10b4ad9-de96-4ce7-a429-1c0c3d886d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed95fd73-c967-410b-8ede-3fe001da18cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02163fd-8c7f-4ae7-befe-3343092de34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dccdc17-d5b2-402c-951b-baa1f677a5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9696988e-14f2-4702-9bd0-7e856a4cc4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8e7042-3665-494b-96cc-ebb1b87dcd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fd1a76-6500-4dff-9cf9-e274240b6989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a979e2-5201-43af-81ee-494d447ac87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a7f4b5-064d-4f03-a97d-40c34ec5224a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414670af-4d49-4657-9dd0-a47b42137813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05be48d-6111-4566-b8c0-ae52a01add63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1e708b-458e-4d05-b492-ec54a902e3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c85c09-89ed-418b-b708-202d1f6d8749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8409f5-71a8-449f-8ca6-203190fcd0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b4eaaa-0776-42c0-a39f-7e1128f6519e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df200250-39e1-42be-ac57-e556d224ca2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fc0c9b-3896-4aef-9cc3-b7b80c183926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b5db64-b191-460d-80e8-b4d3a9d9de03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6fa651-47de-46e9-b7d5-55ccd86239e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5443197-5dec-46ec-b5f0-f3930d11bce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62300178-6145-42b7-821a-2dc456289759", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.20.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6616c7-5455-4457-ac8e-95133cf165a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833a29e7-9308-4c45-9d68-5ff6033e9ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4a5b47-c4ce-429e-9243-7eb6004562f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852726c1-25ce-4c08-93a0-aae88ff8c93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0168dd-11f5-4f46-a62a-f35c92064421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc3e78-0e02-44df-b05f-5b49626dc4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d308644-bdf2-49fe-aa5a-61c9e08a53a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d52c20b-f90f-4280-8f9b-1b44ffc0f51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4172640d-97a0-41e1-bd48-fe3eae9424a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8135eed-9caf-4be0-919b-26492ef14615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.225.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8268f1-690d-4e1c-a773-dabdd6ceecc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7440c6f9-7499-4c0e-8427-a1c642be5205", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.231.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75743634-9d1a-49e2-bc50-243e180ae710", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b13ca4-413f-4984-9586-448331a0f47e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.255.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b085ee6b-2f65-447a-81f5-6e493c67a955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d54a478-262b-477e-ae5a-ab3a296974b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d75d600-5bb3-4e27-a878-a88e17addb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dbfdb3-6cbb-46e4-abe2-adeda13e2130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaa28e3-8738-4b99-b8cb-2b85ba7f9a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4726bc95-6a1d-43b6-ab71-62a97c1dc621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb22418-fb49-4f8b-af3d-9d8e99714bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4893d21a-db75-4971-ad27-4c5ad56447b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8babd5-0d23-46a9-afb7-1e9bb342687e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c8f859-ac61-49a4-8729-785325c6a769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e99129-3a00-49e0-a2fd-3eb3e8745d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def5970a-1988-44d3-bbe1-87dcbf3cd0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4927f9-ebcd-42b6-bac5-94a456839415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d92b4e-3c46-4672-a93c-8bcdd6ba5a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eeb7b5-995c-4edf-8894-0095dcd2523b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97b6318-0e3b-4b0c-958d-9227834c9bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d6eec4-5e90-4525-8275-303960666276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90763a00-29b2-497b-9549-2f4f88f257e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc12dcb6-c974-4439-a477-ceffd734c892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f444587d-69ea-4a96-9e54-e1a8a3da0ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3633d37-aa50-4b07-a480-ea01582cc228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1787f48d-e55f-405a-8eab-2f6b5b8dd88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1f9aa7-ef7d-4a05-972a-2bc2d9e01bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfec88db-d47f-4bfb-b16b-84a8b91ac0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc9fe2-20f1-4610-836e-0efb760facc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4300686a-ffff-42ef-b824-5b29463fb06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856b70df-d200-4efe-8609-16924b6f1a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33e49f0-7963-4fdc-b447-56ca3f598e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.176.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f8bd7d-d9ae-4434-84ea-9e20b79d6e2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1837893b-0398-4d56-b8ee-17445d9b0051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.3.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad292c8-1f70-4372-ad7a-cf95d381dfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f67aa4-4de5-463e-90e9-bf5bfc614b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.6.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d31270e-0ef2-42bb-ac06-80a18f3366b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.180.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdd86ce-3458-4e87-94ac-15605962855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.197.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39534d57-e4c0-41fe-82c2-2d26c85b7e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.57.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb4c1f2-5d96-474a-9fe0-fb21393d94d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87459ff0-31ba-410e-8c56-b230d66a15bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.96.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e25577-1d2f-4cd2-9652-9da457d3ff49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.73.181.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e1754b-f34a-49d9-ae33-f57c09de1063", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.33.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4610ebab-67c5-491b-abd7-3ffdb944764d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.35.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e297526d-32dd-46ba-9637-69028c032081", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.89.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b8a66-8a72-4a3b-8e99-d7607a51c7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.88.7.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18551cd-c6e0-44f8-bdc0-991fdf6dd3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.133.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5846b3e-358a-4388-b6ce-2c80a84ed5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.135.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bca0af1-0500-4f47-bd2e-c46e963f6b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.152.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1643bac3-31b9-4469-9302-1435da1a31d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.156.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5361c1c-674e-464e-88d6-8e462132c208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.87.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae7e90-d648-43c1-b7ee-0db77e353b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.218.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84e4003-97d9-4e81-a24d-7f27ceed7730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858b69b3-95ed-4813-90b3-c50f866caecb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.244.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d45f4e-453b-460b-89a2-f24a25b6a5c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.80.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600e274c-94b3-4b7c-93f6-aae02b82883f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.87.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1812716-3902-4701-bb19-8ffcaa414b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc1299b-97df-472f-a40e-1dc9c7d0261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b73c6f-1e99-406d-88bc-206d61e559e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcb1d84-9c94-4a34-b5f6-f03ff816bfb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8075e350-6b80-4c96-8c06-070f466f0819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70be444e-8244-4c48-aa4b-7b8b08d1ee46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a231716-05c9-4d48-95a9-a933cc5d2d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad2f9e7-4e9b-456e-83b0-c2188a65c542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529fdcd-0505-4ea5-bee1-d49909357978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4d0d15-faf0-43fd-b698-5747c29ab8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d0cd2b-b48e-4e78-b564-42abc6ea0ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536c9f3b-ce08-4767-a808-9db526f32430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69396d6d-43d9-472c-b7dd-ac963980b7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9b6201-fb28-4ff3-8724-967475a2fa04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c8ad99-d959-4437-9846-19d16e7078d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8058d97d-1534-44b9-b6c0-19cd123b80e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98980eb7-5e66-4ca3-9ba6-f76a8af197d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfe57de-dd4f-49ff-aaf6-5731428f1a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f138e4e-ce43-4e0a-a3cb-07b5b3b37f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd6f66a-d740-4701-a87b-5ab9d426a6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578185a8-0d0e-4608-b57f-ccb5704a0165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40900fbb-c2d6-465b-8b61-cd45a344e5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586cc18c-ee0f-447b-b946-d8727d12c4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3664039b-89cd-4f6e-bee6-c0df624822d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2e91d1-71ac-467b-8e73-718fdde9120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d4d8b6-f0e1-4236-b4bf-e687658e6b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945fab97-2752-46f5-845e-2daadebded56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a905dcc-4bcc-4247-8e8a-482c91497002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0675907-f648-41aa-ad9b-91a63f37fae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108125ba-2875-4548-9b49-b0729fdfb2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85667c0f-0753-436c-8433-fe3889e3d25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877908a6-8aee-4c5c-aa72-e41042ca5d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.107.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a9bbae-7857-472a-97e3-9c6e62e665c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.154.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca4a15f-1b66-4806-ae07-e4f9d4a5ead1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.193.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cc35bb-a89d-4ec4-850d-50e7d9e6cd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf69280-01b9-430a-b0b4-03d2ceaf8b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.227.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e19ab37-f12d-44fe-8910-21c3e8bcbf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.233.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3c0cc3-1824-4cb7-9039-e4e020301cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.235.0']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c4d41c-82c3-4447-b57f-2c3d65073d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.5.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb3178-8283-49d9-9958-82e301d21b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.6.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7515107a-e031-42c4-804f-04e5cbfb1075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.72.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888f6833-2a56-4eb5-b883-86abcf07ca9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.8.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b765a5-2dfe-4f5f-a17b-5fa706bcc0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d721c49-01be-4aea-b3a2-6d91c2cee802", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.115.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363576be-474b-4167-8457-3df6755e7ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.171.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb75fdd-1cd1-49e3-8fb1-2ce49e4f8690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.171.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f82bd06-ad22-44fe-9808-071831689dc7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.79.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b9678d-547e-4444-ae49-8d1971d42070", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.220.237.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592fb7dd-6e9d-47bb-8a4b-6adc9a836a0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.107.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784e5a0f-92cb-4990-b8c3-6eabf0d36473", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.15.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1557fb3e-ab4f-4e2b-9719-5d7ccfefb74d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.165.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9fb77f-1f13-4782-b73a-77a783b1211a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce51465-92c4-4dfb-b99e-0dcb74a4ee6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271257ca-f7c3-4b85-9eb1-c8ffbd83a789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41edfadb-0709-4660-9652-814a421fe72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc702f0-4dd2-4548-a3fb-49fff19dd93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a34442f-c7d9-46d3-a4eb-0057b6c5c0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f881098b-2a7c-44f8-9dab-844acfaa9b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7793993-27bf-48a0-83fc-25b536dda1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdc3fc1-5c2b-4ac7-b7c5-cb806804cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.208.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be03a616-5f02-471b-8796-e699b52a0395", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.160.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f493a9-6314-4f21-97dd-6d6613192606", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.37.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0832212c-0db3-479f-82fa-c86369ab813e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.158.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470301a3-2222-4e93-ba85-dba4cea149f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.22.181.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92826c9c-4f04-40c7-af57-ab987b680ec7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.237.176.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b078e76f-1986-4663-a4d4-73edd92bc658", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.148.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e667bc-18d5-43fe-a5f6-62d81f90bcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.150.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99d75b1-b0ac-485b-b961-22bf4564cd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.150.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af736dcc-dbd6-46e2-9c1d-161bfee40dde", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.37.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783f362c-8fb6-4522-93b9-ce8412997706", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b35148-e43b-4c3f-be86-2f1c68a06cef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3def369-f51b-49fc-878f-451bb7376ed2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541382ed-960f-4626-8a5f-d42360ceb33e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.102.206.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c206720e-90b0-4b9c-9613-c3861d796555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0d544e-a90a-4070-9bc3-9fa6dc6f827d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741c540d-796d-4394-89e5-6a8647418a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972325b5-4f8a-4fb2-b82d-203c3ae103ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0250692b-2e3d-4630-9757-30fea777a804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30448c4e-f287-4e5d-93cc-200ed109eafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c21934-b428-41a9-ba78-b2e18ab3a177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2bd6fa-6494-49d7-a99f-8d0a764bb904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c593a0d-47f3-446f-b063-e8058834be22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae35c84-b7f2-46dd-85ac-6ec027bb772f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4db56c-bdfc-4d4a-aafd-41099f76390a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e2f92d-dd08-4448-8e36-8b867a2cb9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.198.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946919f6-8e9a-4f14-b2dd-4153d6aeda0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842eb783-a429-4d36-8c11-6fd226e20784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560f3165-4824-455f-9f91-c19f05ea2326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.82.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008511f8-5139-4518-a3c6-9da23d31d7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.226.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fd1169-bd68-4fdd-8826-1fe69eda2a13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.222.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8617540b-bcbc-48bc-b95c-0c51ae28eb29", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.89.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0096b362-4b56-433c-b998-ebbe1a6b3452", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.151.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a2df9e-8ff4-4d3a-b06d-13f60222399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed313a6-acab-45d0-9e4e-b60febd75835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d369efb-e19e-40dc-9a49-d5eaca4d8a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747373c6-72d0-472d-87c7-c6081b04ac9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf9f993-c1e4-41e7-933f-87b7d5baec2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d1078f-2e38-4943-9080-35490e5eebbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06bbe3a-c572-4f82-bcf1-958d184bddd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f76a10-f38c-411e-8795-b27b27135186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2118bde9-8fa7-414c-8ea9-740b96129e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e31fcf3-9871-43fc-83de-cfb8481689e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd81631a-faf7-47d2-be79-d768dc10e867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b1ca00-7e13-4482-ba9c-8b353fcb5cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f393b-ca6c-4563-aefe-e938ef0d2cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.216.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0610ff-0af2-4c1d-b740-5b77363b77fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da48b2f4-04b5-4be8-a77a-a660008fcb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb58ed9b-d970-40d8-b6a9-57bd6eb3d1f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.48.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bd6670-a21b-4192-8081-8d5c4d2b4e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3448b18-0ec9-42f1-ac1e-43a3106474bf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.211.56.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f9693b-2a14-49f1-a68f-3974ba07f9f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.196.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1ec458-b294-4d1c-9c9d-5943157f5ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70dcaa4-0acf-4858-a444-8d2662af78a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6732b674-74b3-4621-ac6a-7561bd996363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693f62df-2145-44a4-a1e3-e0a19463664e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.111.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cc2df8-c70e-4ffe-900a-be01f128f912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.143.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6332d60b-790f-46f8-9633-cc5ebc20792c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f645cda-0b2b-4d2f-a71e-a8538a5cb79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864e8be6-e66f-4b63-be8c-74b804c3ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a648369-b167-40e1-8f73-a33f6d82f1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f69429a-0ef1-420f-bc1e-8ca92579e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac2233a-b425-4429-b24f-e82fa835a316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b31c1b3-2640-4d77-8840-5be1111d1f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ed33eb-3895-4e3c-b157-330a81ba8ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1002a502-1c17-4948-8727-c4663b3d0898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718fc9ff-a5f2-4ded-b357-53a9a60228c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e3e121-5172-480b-9469-f507062c426d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6107855d-78c9-4a57-a135-8189f904e09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b28c05e-4868-4914-a9e9-b22e2a7d5618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9f589c-6926-4753-9770-147f1c20caf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382f4e92-715f-4f63-bf2f-c65f63a1f1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0ae1bf-e866-4dd1-b70e-7ab5d6e7d2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bda6a9e-cab9-494c-90f0-900c4fd33d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d956142b-fd47-40f5-a29f-39d1ffced7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146d7c0b-f866-41eb-b386-46b58b30db60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129c303b-fb1c-43dc-b109-e27cc5354f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6e4a00-1c3f-4e30-862b-336362da9a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce037074-64e3-4af9-b60d-d59598b00465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95fe0c2-b4e2-4110-9d25-02182b0dd0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a014c8-5a57-433f-9b5e-c633f28cfb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ce2abc-1b67-4b57-b1a3-1e8a6322df5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85c96ec-dbab-491e-9910-1d443ad79d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b71666-76e4-4110-9a6c-709f405fc051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c2d652-0687-4f33-9810-5d882cce2aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdd7d9b-ce8a-45bf-a7a7-8e55ed97517b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3e7364-ba84-4b02-9f73-b37b7f5892ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5305d896-1fff-405e-901d-6a28d650dfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406ee60a-a5b6-4bd3-afdb-aed4e16f9ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f546edf-e8e8-4feb-becf-9afdfd42ae2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04219c6a-7420-4056-924c-1f8e3ca22a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a712e07-2ebe-4624-9dc9-aef77cf3df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8b556a-2e95-47af-b4e2-635d7a80e39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3629713-7a08-42e0-810d-460e289e6a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad551fbe-0a80-4e09-926c-e6bfd313c1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caa0193-9b6b-4c4f-a2cf-48ad96d010f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf2054d-baff-4d22-93ef-3391bbd3d089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0356fa46-575a-4328-8881-a846cfa0debd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97859c59-8eb8-4ebe-bd88-58225062c2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04071948-6cde-4ee2-8b9c-6a4ab22309b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62d57b8-09e5-478a-a83a-8ade003ebc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727dc4de-1578-4463-965e-b1a2060f5b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8a9b99-ffa9-44a6-bca6-cc867b5b4eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.15.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f1b512-b171-474c-bbe2-3156ce995c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e25583e-c345-40d5-a503-f71c84d86bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c20416f-0ec7-47ed-8a0b-c82d2edc2cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45cdbd7-7af3-4a9f-9c49-01f071b71828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062d28de-3c32-4d07-b4a9-4b8bbd6ed3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd26610-31ca-433a-b85e-115b78ff151c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.148.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83868503-65fe-4a5c-881c-0c5485f2562c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd216fa-d6bf-4a19-94a8-e020d9bded8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307b8430-236e-460f-94de-61a5342293a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e92e20-1455-4afe-bf9e-61c5aff2b638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174193a7-434f-4166-97d6-d936ece57edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5ac9a2-96d8-4795-afe6-6974dd14201f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedbe3be-3c9e-4b5d-b512-4d67e16c2953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515575f2-0de1-434d-a8ef-02d0db6da4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f6cd9-885c-40c4-bd4b-b92bb6ed7705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4314d334-0995-4d97-94dc-098388c9a87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f0269e-7665-4ff9-a9e4-841167fbce2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dca196-54f9-4ba7-83b2-1cd43a72e8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b2f25e-fe0e-44b9-a919-e3b3f25e0f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61766e2a-176a-444d-bff8-77d02f9bd696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20631cb-e171-40e6-af7c-ba59b425d1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.14.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba13195-80fb-46ff-beee-713f0cbac2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4250baec-245e-4ecb-b0d3-9ebc81599f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d187a414-1237-4839-ab24-a3185a1d87fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19fe3b5-7cc4-404b-9cee-f425f996e781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629f6c7b-ea7c-482a-840e-f4f3ca53df71", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.245.217.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa4191d-1457-47e5-aeae-2b2ff605d784", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.42.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928a438f-9911-4c1f-80e1-3cf72feabb31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.52.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265d37a4-f8e2-4d91-847b-2575953a84d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.234.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e92136-cc05-43db-8b43-49d0d553af1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbdb6d5-7ece-4e3d-bbb6-5b81ed7fe934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fde0d3-d835-459c-9f47-f3d05ae56c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6e65bc-7618-431f-83f5-a1b6e201b5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b313b0b-e6bb-4f6f-9ac9-544c439c17c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb271f9-5a4c-4f4e-b9a5-045c9eae6d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdea92a-71c0-4e4d-bffa-3f2c9884dc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bda1e5-1caf-466b-9729-7b4939cc065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ead4b3f-a3f9-43b2-8295-6fbd00dc9a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330744c3-1ade-4d8a-b76a-7a7b88d94b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2b4dde-bc70-4840-b207-d00eac3cc7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4c3f76-2f0d-44f3-a6d2-d70a4230954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c5b564-cf25-450b-a8b6-51920fce49c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec76d35c-591c-486e-813c-fb5b4e4aba61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98588959-7674-4f48-b8b7-0a278b02e52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1183d49-4e80-4fe2-9000-30dcd88eb18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a3270d-abab-4c7a-8378-7073654b7706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f25020-54a2-4f87-8f59-39f12f580a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.248.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc61b6e-936e-405d-8686-b2a323af9472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.71.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23a44eb-4e67-4946-8632-d9369b7dc025", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adfc8ce-0f4f-4c24-8439-e50fc8c76eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.173.82.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb8875f-dc5b-40f3-84d1-5a72de2592a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1e736a-04c8-40be-b32d-f77e8e67d478", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad3ad93-e48f-4bd3-aba9-ea1f53c4906d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b753b622-f663-4d41-b41b-d591f8aecac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.6.54.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bc263c-eca0-4db1-8f02-9f6e84823272", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.198.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4a177a-5b43-495d-8bad-a7de7d78a2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1d2343-fd8f-48fb-ac4e-d79ce7e39fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf75f2e-2853-4e53-9458-ac82d81779c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.124.88.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c447b3af-727e-4881-b5d4-0894b94bbcca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.42.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f29b50-ce7a-44ea-9754-b508aa2ebccc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.31.139.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a395b623-982c-467b-8035-c9aebc4398da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911e2e76-5a42-40f1-a214-965031fda166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6fe9f2-f56a-4fc8-b9fc-331fb47261db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db425d9-2b06-4450-9711-e5818be17a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b72b2e-d74d-4af8-9467-f6545313fed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f00db-0f4c-4d48-abc4-12601ac45e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf534c2-2673-480a-b0f8-2b2179e94cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882a69cb-1b7b-4af1-bbda-68370ef59f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50450554-8fe5-440a-a0e6-e50ce124decb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b50d355-6d6b-48ec-a009-7cc0a3d3f463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6573953e-777e-4521-ad33-6fbd2bdd6dad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7784a0c-0dd0-4674-bc54-33992e6da705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa41b60d-ec7f-421f-bb70-748f6feef855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c59f86e-a2ac-463c-a2a8-938040129fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa2df16-5268-4590-aeb6-632eadb74408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7108dee0-3035-4fbd-b4b0-70a674dc2cb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce94aec8-7aeb-48c5-a51b-f22f8bbfffa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69f0dcc-5cd8-49c4-8d19-8deab8224044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c08da7-3c13-4496-afa8-9caac9a9fdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1422309a-3849-47e5-af96-4b4755af0b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adec817-6a48-4c64-9736-a99f790904f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384cbd13-f172-46ca-9e4a-33dea3a26159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a64d0-1bd4-4a68-9464-c64ab1da6635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f94b206-59b3-4cdb-9ece-f6cd3758a470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e7f24f-863e-46db-8818-bb4972287cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3acb49-cba6-4640-b5d2-076916d236ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9811282b-2d3c-4427-af5b-a17b33d23966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fefe18-a72c-4149-a0c5-990619effa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c364c3-1951-4967-93cd-7dc0cc346a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14660dd0-5790-4ad8-9714-246116f331ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77b37e-84f9-482b-ba62-9fa0d902ef84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb2ca62-0cde-47de-87de-210b4e1ec431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f504be5-86aa-4b87-8b35-ae498e01888b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2cd7e6-821b-4e03-bca5-4a2bf30120ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f777e2-cb58-4f04-baa9-5f2a39a502f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4223e8b0-e42b-4fdd-90bf-6c661deee38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f60901-4074-41c3-9d69-c891835d201b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5392c4fa-cd7c-46a2-8e1a-d2c2ec673ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29099abf-6ed3-45b8-bae6-7b5c4240013b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13947d2-1f8e-44c1-bcdd-0ecba26f4966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313983bb-b4cb-43db-98e4-9c6d0c6eb191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3ebc7e-ca5b-4fb0-b835-e98253cd2ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57a3841-d3a6-44c3-8961-d593f6c30fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004bdcca-082b-4745-824c-75bcbc514f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1563a3-0ea9-4c4c-a999-67950ff3481d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fed67b3-6fd2-45c8-9385-bf72deb0aea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.128.201.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcdb98d-7722-47d8-b484-38a73e3cd3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.184.143.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab2f665-c5a2-4014-a0bb-977e3e2515a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.2.114.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772f27ac-83af-4658-8331-3a8232fa8e54", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.200.37.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d451052-0e5d-49ba-8a60-ec911a85a054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.230.129.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871ffe9f-c4bb-4534-8f7c-5fddf17d23c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.43.83.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8417dd-40a5-4fb6-a447-dd536bd9a913", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.6.162.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da38c3a-0508-4ded-a877-1cc2849f1dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.107.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42611b15-e6ca-4b13-b419-676da13e04a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.14.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72092c0b-fa7c-41f5-91c0-7b1e61747ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.147.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca78eedf-eb67-450b-91f6-9233d9f693c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.148.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0b5109-096a-40c6-a6b3-d0e5ef7f47cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.168.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c10ecf-dede-455d-af41-d82794bdd642", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.59.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cc514c-e613-43e8-9cc2-d8261d184b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e03e218-ddc5-4ef0-9cf5-306385b7fc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb804c3-da2f-4857-99fe-b6d8490cfeed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7595b0d1-fd3f-468d-8e49-9f3327abf641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cb5ac2-3fee-4e78-afce-eb1bf5d3e364", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.185.136.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72dc6c2-7c7c-40cc-a8b0-c7a4f9ee42e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9741fa65-4f84-4567-b1dd-91536738e4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed352e0-a994-4391-adb9-b31f80bd2e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.76.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f4abc-46be-4e84-a56e-48e1abedd7fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.77.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a4880c-4102-430b-904b-d30b8d4461b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.239.117.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e04e54-f01c-4150-96cb-a352b9c84d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.45.127.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3a4277-1e1e-450e-9e43-c7bb62d9b647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2139559e-ebc2-482b-94d3-a2240f9e357e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.240.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d32d41e-dbb8-4de4-b55f-29e92bf47128", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.39.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b15de0c-7d86-4f6d-85b2-f093e827f907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c2dcd7-d777-40c1-8f4f-540857dd071a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.111.10.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d753a8-6ff7-4291-924b-6e7532655735", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.176.210.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe7c99e-3f92-4d26-a2d4-92628a5ad5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fef9c4-f53a-422a-b165-497878dbaa6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6071067e-162c-44fe-9d15-a46838b227a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.186.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194cbf22-cae9-4138-853e-bca2004d76a2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.248.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1976b809-daff-44d9-95e9-76393eae172b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.53.201.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfbc248-4314-40d2-8ea3-d7771ac4360c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd509c2-ece4-466d-904a-290478eb5399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1b3b04-71d0-444c-97a5-5b351b87f4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f12840-2a96-4afe-a82d-da3fb10cc632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.217.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb533f2-a18b-4318-9d26-09edb2b15c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.68.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a93d13-a886-454b-91fc-0a08384133ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.166.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9dfa66-5f8f-4f4d-bb27-9cfafa147267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5a5cd3-4f5d-4c1d-885c-6652c72fe9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.124.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e687af89-5286-4c8b-bca2-fb150b6756c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2678d4ec-ed64-4b79-a7a3-7b35b5531be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.233.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2f76ce-9e28-41c2-8596-b76ea5e78185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.11.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44aa927b-1a56-4e84-adac-6d58ad92a568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6ab18a-0711-487f-ba69-1f25fd6052bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1b1b9-e1a7-491b-a418-66d90efdfa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.176.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93107e09-4836-461a-ae59-eb68cd552a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.30.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b738790-9ae3-474a-b241-2abf9a026d06", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.36.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8400b0cd-f232-4f81-9147-1b852a7b0843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.43.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c9ee1a-5735-4903-84eb-5dafad06e258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.244.187.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b35ca4e-57ad-4f38-b569-88f19becaf40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.247.56.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dc0426-2ff8-42d5-b2be-92b80c79347d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.237.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970044e4-529e-4139-825f-cc9081841c22", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.208.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030bc1c8-1e45-4d32-89da-a051e8649201", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.39.158.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaecb01-0ea1-408f-b200-54ffe42f813d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.39.64.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623cfb31-e3e3-4c51-a880-cb6fd37cdc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.67.176.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8678e019-94fa-4644-82ee-e6c6196e2876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.87.150.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf26bd39-4937-4f71-b29e-872922c76f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.155.144.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95364bbf-1bde-486c-9290-a08f96e1b9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889c1040-d07e-4e2f-9ab0-9642a5c24b91", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.18.161.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b65f1b-7077-4860-ab30-53c5cf3f7f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.18.83.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaf62dc-2739-4eb2-b1c1-1e789fd0cefa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.154.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb4f704-ba9f-453d-9043-e8f3f1fba036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e204c8b-67c8-49cf-adae-b624373e7d8a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.156.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2b9fa7-9b4a-49f3-b9e6-d7ec87d471c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.221.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815fee8e-1f53-4bde-bdff-6417643cd668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393a80cc-e7ce-4e12-bcb3-d8f9bc7c2f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.237.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6526e32b-6c54-4fa7-bbe1-79a9cc608383", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cbb4ed-9634-406f-bcf6-34fc1e1f68e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.128.240.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b618ec3c-869d-4200-9331-69662bb3808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.159.121.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6d5178-7828-4b2f-a372-3c91888f4b88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.193.72.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2df7142-4d7a-48d6-9f6e-413fa670c567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.20.144.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42470c6-0ca6-4e56-af0a-8a6463e6f760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae4c343-5c1f-4a7f-9b0e-51684960c183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7799d29-72fc-4348-b400-9a9c3a073978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.96.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1ef0d2-1cde-45f0-85e7-143f51886d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e032ac98-f739-4f06-a581-5303b09170b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c31d03d-a652-4367-b852-8c1a9d62fce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be9bab0-5188-4414-a766-3c562ddb2d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcffa15-dd5c-443d-8089-d59b4cd83e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb71e1b1-db2b-4533-9e50-4ecafca48b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9da8b76-2fca-4724-be45-a9ef7f5fd9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3506035-5253-4bb6-b6da-edca796dbdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397a9b2a-f0e0-4f90-a480-dc837fc6510e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9218c9c8-106d-4dbc-8083-546e692101ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86c8387-a8ff-4ab6-bd8e-75c76f5f625d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6930e0-4dcf-4cf3-a903-0f53b7bb7cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2e5052-3e97-4536-a996-556afb1d1abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1680376e-0da2-4b93-a778-471dc80241fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca25e34-d653-4558-bcb2-b52bcf6099c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818bc73d-4431-4f69-a405-c7d36d12b48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57795ca3-6c0d-477d-a3f9-09f360ddec87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1681ab-3956-45c1-bca4-95f8487613bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d59628-760c-4aa4-a034-e433f19fcd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5752ee2-29e8-4faa-b988-974848a143c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7047caa1-d6a1-42ab-852e-f1b508381045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fb23f5-7212-4b77-8e49-a759d6cd149d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b68161-36d6-4161-b900-9f45a6c65243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.54.243.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e72445b-520b-42c8-97b5-e5dd2130b851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cffa4e-7747-4aac-a619-15f9869bb79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.105.90.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7a8a34-63ba-474b-97e4-0b1321115307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994c2c85-77af-45f4-98c4-59b1f8c2194d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.113.10.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a553f77-c921-4d52-ad4b-734569542c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472cbb61-05ae-493f-8196-803a7c324194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289cfab6-1313-469a-bd32-3050790213e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60400a8-4dd0-43d5-b143-8c490b915b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5847cb-a7dc-49c6-ad17-0b0299fdc58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0456b456-c4a3-4872-87fb-1da33dfa4232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde213d8-8ec8-4327-9747-a396e89efd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf67d89-a747-4636-88a2-13723526ed85", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.158.22.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3afc563-ac3f-42e6-8607-adae9b681ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e0a68b-f102-4560-b46f-56ce4acbfe54", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.182.8.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfdd956-9255-4d41-aa62-c1e7d3764d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b093852e-fd0d-46d7-836b-4d9d26aed81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e901d6a8-3560-4288-83b5-0d1589b02a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6684b0-151d-4fc0-944a-2e26f6429f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.165.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6addbbdc-17c3-4295-a119-87f398a96752", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd3237a-ac93-456c-b7ff-a8b612254422", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6283aef8-adfd-4f5a-aab3-33021468635c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca1c92b-e505-476b-af41-d30034c503bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f9bef2-7539-45dc-ab9a-54da553de67e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf2173c-4ba8-44d6-975b-c8c78aee9d70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55ae9f8-17bd-4595-8e71-56930f6dda33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432087e3-be35-4b18-ac30-58cb4a25ffd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95576e61-12b8-4633-a298-f1ce1b9ca302", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc96747-34d6-46f2-a974-4a496b4f58ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc99526-5129-472a-8d02-f3a14c6ab094", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656cdc43-33e8-44ba-b168-90bbf0d17aed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37738ca9-d503-49c7-9308-e6c2aca03c78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecef3f8e-4901-4d95-a09b-a34d32c520b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859e92e4-2639-4536-b0ef-048573ec4dd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bc0da2-ea47-4066-adc4-3a90d17cd7f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215166d1-8abb-4cee-b7f3-79b55661cf56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7853473-f864-4bfc-a5a6-52ebc9659d02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627d5287-6477-4991-9993-a32a5e07ece9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dd53e4-15aa-4591-9cd5-5f3165008a31", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.13.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4585f12-2d94-44b9-920e-c5413ccf9273", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.198.27.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393163b8-be69-459b-b507-6a3df9e6fc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe63998-601f-442f-a249-7dd2621a4b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533a9809-9385-4277-929e-d3021810d4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94487c55-1cf2-4f4a-9a69-36de140be91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80e2e4e-37d8-436f-935c-8c5548a6d8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c196e89-94b6-401a-94a4-23c2437bf809", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.223.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89948a19-51e4-4b20-85c2-0e113237ee3f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.203.237.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce2e63c-67f2-4b75-9d80-7e10a5639a8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.134.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31936d78-bad9-4c9c-a178-b703d4084535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe98653-14ac-491f-a115-ac44fe88e901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2744276-eedb-4be0-993d-f0f01fb2d7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3866c8-e475-46d6-a1aa-428b7ab66458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdd5d03-3a59-41ef-82de-373ff7f7ea0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d01217-8e38-4ab3-8058-c0c608bbd0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7828c6-f93c-4d01-8d59-efe450cb2b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f600ab60-a7a0-4313-a12a-c25fbf344cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74799153-e64b-456a-8034-7f5fd1be3717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4078f56-c1d0-48ba-95e0-1a042cc8687c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bc9c91-eccd-41a3-8beb-f99a53162789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873af8d1-2461-4526-b336-6cc29266da29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87092a12-a68f-4aa0-a7be-f8a72358d45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131e6f27-5a94-424a-b78e-f9b2655b9eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c472517-bcaf-4995-ae2a-828698a130fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6831dc-ea96-4ba1-9e7d-12a6c548ee77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282d76c8-91bf-419c-b033-76c792de0842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd6d4c1-5f31-4f35-8832-7bdb80aa7c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.203.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd546796-b309-4097-bd7c-aef471099103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f978014e-2cce-409d-b9c2-a63a3e716d53", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f969a3-44b9-44d3-a855-bdae314e6430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c6328d-ba9f-4629-9bb7-516b4fe87475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e9feea-8842-4a01-84d5-9d02cfe0ae45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba39dd5b-4104-438a-844a-ae54439cb6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df980a3e-2287-4e72-bb16-9d1685048d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b719b4d-4a5c-4d9b-bd54-0aa63de86875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286586ca-8cc0-44f2-9dbf-961287e5779c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0a0b64-0a73-421c-b6a9-386dfebff074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bfb046-8c25-496e-b28b-31019fc96284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c1b1ba-5eaa-4637-af58-860925f24f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a79d1ef-8c01-47e9-a354-e2b0047cf5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1109519e-e06e-4ddc-abde-92924aa5a847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef374fb-12b5-4970-9048-84c3bb1078d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d50dbf-35c4-4ca9-84db-adca816c4a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65671fca-19c6-4194-a39d-573f626b029e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de032060-1ad6-4764-9821-23655a229816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327fbc21-75fb-4d61-8b36-e9b2603e9ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65601a0c-7c6e-441e-b943-91695ecc28d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6524af-4c51-478f-b0e2-8658e37cf8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96adf9af-7ab1-4941-a763-11c49e9e696a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b688cea-e7f4-4d2f-bb08-8b32c8cc527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef907eef-d606-4101-b92a-37bb002a3fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6418c6b-cc15-493c-b85d-eef398fda3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7304594c-2117-4b93-ad41-18a0d7507d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaec9e0-d66e-44c1-911d-1f1d3927ce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae74b26-0fb2-43a5-9afd-6340548c59c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8ed152-6e0a-4166-8394-af8f7149430b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2848e924-c772-441a-b7d8-c88c4ebc3fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343f5b3e-70e3-43f8-ad14-ce8fff9e9eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e073c01-f089-490e-be79-225dd6e3837c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3234dc-f154-4c72-872c-8664ba66fc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9622dc-d502-4d1d-9d34-4b0b183efac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d23a09-e24c-4c47-b78e-1619e1eaade9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8cef12-ad00-49d2-a5df-f93cc6a0e69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118d4131-fab1-4beb-9bef-dd812242c6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f534ca-6856-44b6-a4d9-b0f65f992a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830a623c-69b5-4c45-9c6d-1a693a9c55b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.249.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9910d9b0-78c8-4f57-8e60-8b17ee5c0d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19397cc-2455-4b14-8d19-7d12d59bc902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3682c4-40c6-4128-967a-ca46c0e3b35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.130.72.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdcd375-8a39-4283-997f-3731609826b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.148.224.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f24dc0-aa1e-4591-9852-7fb92fe71917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.149.199.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94fb724-8dc5-4498-8765-e74a312de094", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.248.159.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5982d3a5-d00e-4163-a5b6-264997ae8f5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.38.26.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b337484-8b4f-4489-8110-b3e32e102dba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.0.238.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3dbe2e-52eb-4442-ba5c-81747c72fd68", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac9ce31-dd09-4a11-8f3d-35f4157b974b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8272694c-2442-4704-bc18-146295a3617c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.210.77.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7887e0e4-65ff-4184-9966-bfeecc739418", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a46822-91a9-47cb-833d-1c83064e076a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.132.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ba34c-dda2-495c-8646-a836b44d7e76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.73.93.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c35a280-ccc0-4c89-ba0f-c4b0ca4a9354", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.214.210.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545f37de-1f43-4b6e-bff8-fc019ce1c76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfebf02-7d95-4464-8a9d-bef126821296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92811d5-aaec-459c-be26-d81573535c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b021b7-9937-4cdd-9a81-c9770bb837e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6857bfec-9a39-4586-9197-7ad4ab969eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ed953-c718-48a2-84f8-792fba1903ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc5d3fc-cc34-48ef-b81b-05d80f30972d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ff4f5e-9987-4eea-a9a5-613397a2fc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a82fefb-4517-4d5e-9c0f-08c1754a0464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8e9b3a-d29b-4621-9514-bdafff6a90fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb512c3-0950-4fa8-b6df-ecd147a3aca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd7ca3f-3321-4b58-aeb3-9b45f1559c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804f052b-bc7b-4e32-b823-ad5f34cb4f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26122bd2-f301-4922-94be-dce629bcee74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4dbe38-8a24-4cb1-b295-0d1826fede0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8804cfe-2326-4696-bbfd-5cc1247d3d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7acf1df-e684-4c85-889d-12891af81666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8fd578-db94-4024-8b65-4dc609ddf40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee52965-01f1-4cf7-b78a-6ba33523296e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54478fe-3559-42fd-8c92-d91af835da37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed20f324-b53b-435d-9953-93b127162107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70643063-9fc9-4ba0-b091-c35bc3708950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fbff5d-7f64-4bd0-b7ec-2d1bbb6061e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef18544-a6a5-4f5a-9dc6-5aeaba1d5ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf2b935-db9b-49d5-8377-6b52085e748d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6532ccc2-4d88-453c-bb90-90d87f0e18bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84333a05-ad32-4e63-b664-6b0a830ec8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e071f0a1-9f6c-4acb-8c48-e095f1073c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.142.46.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbea87c-f6e5-4c2f-ae29-742305374a66", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.152.66.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228f7790-5aa7-4001-8c10-0a36b221136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.168.106.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849c45fa-0608-484f-9b8f-8544fb81f6c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.178.42.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107b7250-3906-4538-98a0-3f130a0917d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.162.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ecf64c-fdf7-4fae-9f66-5eaffa95fcb9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.11.247.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96036883-4eb0-448c-9c1c-2ea6e591271f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.148.112.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d11b8da-007c-4ed8-9e2a-c02a55c03ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e71aa4-09f9-4349-9272-343ebaccc586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e26f8cb-de58-4819-bba6-d5a48467653d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c3a0bd-4772-4b06-a944-e00bf6fb7135", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f7340f-bb16-4a67-b0f9-efc07ca5e15d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.11.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae631124-08d2-4429-b620-2b5d703d3f66", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.151.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d336fcfb-7b6a-4165-8c72-99138f764f23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.148.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b254878-cb9b-448e-8c29-46ff4e7b3a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af79e59-dcac-42df-a6ab-1f6044d14e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a67d33f-1a9b-46af-8d9b-bf282ea9bfaa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.201.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d594fcf-4095-4573-ac27-f432a323afdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.207.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff54a73-bf3f-4355-865c-f25fed0e9f72", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.211.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e59feae-5ea4-44ae-8af6-7c231f199a02", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.226.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db912a1d-f981-48b4-b05f-2d46ff08e72b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.237.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a14fb35-444a-43f5-a40e-4d6edf53e168", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.242.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d576cba8-c8f6-4007-ad2c-cb4ecc1087c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.247.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfed63ee-ec57-47b5-bbd4-aff4a1bb720d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.180.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7de0b1b-723a-4c72-87d7-f418936d0864", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.197.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5826678-f182-4a27-817a-bfdc84c11a14", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.244.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0499a02b-253a-4209-8728-fd859f33de82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814089f4-8995-460f-a7c2-c60b3782ec6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.176.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e73ed38-d3f6-4cb3-9655-fe6c44e88b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40933361-b354-45dc-a0f6-8b1f65c69609", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.213.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b226a92-3ba5-4267-a885-a1d9fb09b29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.137.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3278302a-0e9d-421c-be1d-b9b8d6011e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b8f2c5-2745-468b-ba86-a0e5c42bcb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2795e5d2-b8cc-49f8-97c5-b9eeb5135a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d8575a-6248-4396-acc5-12d9cdefcf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfc18be-b4d7-49ee-8d81-c9666de871dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a921dc7-012d-4ca3-9437-4b26cf2ef646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38e1c8b-d360-4baf-9464-66bfc0a552bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e9d579-6dd6-4c2b-9d46-a8a020443812", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.218.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0945e188-34fc-4cd4-8760-9b4d2f31b607", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.91.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef844f9-f88f-4e52-8ddd-8e62050d8bc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267de658-eaf1-4daf-922b-97e0cc7a8510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7dac26-6f3a-442e-a7a9-03eadc324ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a8d43b-ced8-48a5-87b2-86a713709c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57327fca-b4b5-4a39-8999-f290b3e4f50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece077a7-c187-4264-a599-e7e14ff407ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718fb8a0-5bcc-4aa0-9caa-483276d74d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80ce153-5ef8-4eda-94e4-4570b8685679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9b1b18-833c-4f5b-8109-f8e9914c1281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee575df-62a5-4449-be09-5dfaaae38fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e379b72-a56a-4d1a-a385-692f9e60c8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4722be9-e775-4fbd-852a-e7a2a00a1f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db8d8eb-f562-473d-a64a-c87a4a276dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b32e230-ec5a-4cd2-81ae-9bcf732aa92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8a46d8-07f5-44b1-a702-68998821acce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63db43c-7a47-407a-9315-983dcd735890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f68f8fc-c417-4a63-b65e-f9ea4c2164da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d6a26b-1f8b-41cc-8d27-9b9ce2224035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7daf55-1e19-4df6-b3c4-a834a7aceef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ff2f15-7025-4401-9116-6b89acdb674a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123836f5-2d79-4966-8ceb-d58d0e0a01fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3190b1-09c3-4cb8-89d0-333525d52195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6cb3f4-fb0b-4adf-a387-13be0fd60373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b09a9f-6b96-4bba-a26a-132a3c425d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff4a285-fdf6-4b56-9549-ba78e41d6609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d861a788-5266-4109-9eb4-7d657fb1f33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b5f84d-6865-4657-8fd8-c30f40763230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac94446-0568-4830-bb91-9c8844326299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc007130-e04f-473b-baf6-096ced95a18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f58eb01-1c4c-4477-99ed-caa757c6ed1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d2db8a-f746-4503-afc6-d586a026e1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01076623-bf4f-4908-9966-5447056d8a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf37839-e84a-4660-84f2-6c34a4221bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0336e870-c237-4902-8ff1-ce6afe90fb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e708c3-b13f-4040-ae71-59078352797c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97678e3d-7039-4bf4-9fde-96b86326a7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f2a18a-9fda-48d8-bbb3-7d3c37e484ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf52f945-f7f2-49e1-a403-8b96805217cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4374ad-b0b7-4398-a7cf-0df01583a150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37d8673-0108-4826-b02b-b97bfdf772f9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.251.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd0e80c-5bd6-4c33-8857-6736db6be27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a523a70-7223-452d-94d3-9706548f86bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181e8a81-60ad-4d6e-9716-e279f21ad29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f4a5ca-d8c0-4814-840e-dc2937d3193d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e699d6-aaa9-4131-b93f-d6221104278b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27aa744-5787-481b-a606-7b79832a7a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb0d7db-fcaf-4451-a71e-10b3b8de3965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d278f3fd-8e65-49b0-b2eb-6e52394baafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda65845-986a-4b11-b56a-6ce7551b4024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89abe040-e69b-4125-ae0f-76f4b31d0249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c91e88-a307-491c-a127-691daacc9c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea05aa-4e33-4c0d-92e4-eafcdfedb2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03b3949-6dd9-4bef-a514-a52a5ff3fe0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3d7d4-c255-40b8-ab02-248975f4233b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6714bac5-b032-459d-8502-86b54534f035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa745fd5-c566-4ae5-a987-626f1093003c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698c888b-b7cb-4046-87f7-c86652ccdb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c54010-601b-43b1-8d77-70d744058c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af89c9e1-0984-4b5d-9504-1c083070d815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.221.201.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c8f89-b8ea-4a1d-84dc-8a7727347b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.238.152.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2d5e8d-4454-49e2-ad65-19a21643284a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.238.152.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ab7fe-93ac-4d62-9081-8fadfb3c9dab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a789a606-4253-4eec-a760-1ee29ee0f56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a44a21e-d103-4503-a1aa-00aa502ad116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b8bd08-5693-41c0-b50c-cd6fe24fca09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e30656e-821b-48d3-85e6-da51da3dbc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0388b05-cb66-41b6-bfc1-d8ccbd3d8680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb07d90-a40b-4c5e-a26c-ff328d1cda17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78705304-82b3-44f9-8e3e-defdc248a40c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.30.14.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a297d76-0390-4fd7-bb51-b6b80f335b81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890dc18b-b09e-461b-91b1-8199a9b7b27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bc9d62-a0dd-48dc-90fa-8b6d893fd1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781e8e7b-f574-4ba4-bb4d-00b785a67640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6bfffe-8f78-4b04-bc85-28b19b586434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8545b48e-db01-4035-9860-3b6c2ec2df75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064fe611-70f3-46d9-9a4a-d8351e8c0857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3db9664-0e26-44a3-a27f-35de850e69c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5bc9c4-b87b-4386-8c63-45c2fa3beccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b43c5cf-04a4-47eb-a3cc-0b2c3f08c35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9e4087-59fc-4cdd-8e4f-ce63f2028690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c545f5-7a96-4b90-8982-ee35b21dc2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e466c8e9-002c-43cf-902e-f1bdfe27c2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd16055-be79-4185-9fa4-43cede48d674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae261de4-8cd8-4594-a9cf-6602383051f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c6dd9f-d623-42b6-9db8-0a6ccab60ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ceb2086-a8dc-4771-971c-898cf54a5051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b765122-e645-4818-b55f-b92abd7e0906", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.36.84.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea38837-03ff-4c2b-9ea2-e57c729adc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128e6ea5-7a10-4853-bf36-3181d4aad627", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.154.31.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8afd2b4-4c3e-4af7-a90b-b900fb2cf2ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.160.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33ba7f7-7123-4820-bdbd-1ec6d2406cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c61b8f-b4ad-4cb6-aa7e-6c1129f9b82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8491bfcd-1911-496b-bf5a-04a78e78716b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc535b2f-7630-43d7-a53f-a9f26fc4d135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0861940f-9590-4670-9c96-ef17a72a6f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682168f6-0615-47dd-82d1-dcf21639f8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5464b4-3147-4d25-b8da-1946165cfc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5b895f-55fa-4d80-ab71-cefac179befb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c183d7-b97a-4bd7-9987-325dfe14bb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52a77b1-411d-4afe-8a23-e29b72e56f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010ed831-9175-44a8-b086-6a0cfe1544ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.112.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e4912d-733a-4225-b078-58f43f28b1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abde7fe7-c8a4-4feb-8f5c-5442580dfc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054250f7-f84b-43d6-a7bc-5fcb2be19665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77060513-e818-4941-b584-25077454de27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ab6e55-329a-413f-a141-f7ff2435ebb5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.28.87.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b179e1-8b74-4155-8d34-6b9ccb6cc10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.33.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb68c76c-3173-4200-a3ef-9738b78817ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d44bc2-ca25-4abc-8c2c-c62ec07a03fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9d819d-7802-4415-80c5-e1e3c16c7a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebf45b5-917f-4d0f-bf27-199d5d2c6c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6088757-bcd4-4a78-b8e5-01a0f6a597e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb246bd7-dcf0-482d-813b-177736b2b82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19da07ba-ca04-4ed4-8f99-b83af64b0cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d38eab-05a4-4b73-8ee8-a5ba95db082a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79661d80-997f-4cc2-ae88-44fba387c872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d941a5fe-6482-489b-a56b-847005a3727c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cae9f6a-0cbd-47f9-acff-27da8980702d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1266761-48db-4c83-9bdc-8e9b0ae95d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f50d164-f775-4f7e-86a4-17bc937bf9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b5d174-9789-494d-82a4-9672bae6aaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a1b006-6c4d-416b-be34-a4ca1b11f250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8abf7b6-03ea-4ee5-8cb3-0fe9402cb3ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.208.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d2c9a6-55d1-45bc-8f99-aa5056889bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.112.230.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2531d93f-e536-44d5-b832-26d77c2a4eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a9fe59-b42d-4953-aca1-4804dfafdba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5b5c0d-a73f-4f2f-81c0-842daf98a54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7922887-30be-4ea0-b540-3ca34ef8d1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc448eb-bf22-4ff6-9643-c349db44d203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a68287-42c2-4930-9e96-5f40d314464b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.208.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e8073a-369d-4c93-bf4c-671270e1d348", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.158.4.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57902d87-40c8-4598-8012-57772b43d7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c312fe2-3f64-4bc3-8eec-9dfacaf406e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cbe61d-d7b9-470c-932f-fe77dccc42c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbe79a1-bf81-4bdf-82db-92866d08456b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61c3e85-b25f-41df-84e0-024dbbf32ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9ac371-eef4-478a-a4b0-705b089704c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadfa585-5997-4cf5-80e6-5beb513151b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca59ff04-6d29-444a-b507-81a9cd47b89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10305e2-da27-4ee1-b3b8-dbd6420bea6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243e7558-4dd7-43ac-915a-dc510a944d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0702af0-47de-44e3-9027-d0205ac75228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58df10e4-fb71-472a-9dcc-9302ea983964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd948fc-1955-4d60-a100-398f4f29399d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab22ba5-04b6-43e1-8c4c-d5b2420e2617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3837aa7c-d24e-44eb-b525-2390ebc067ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedab456-bd60-4b21-9795-e4e24ca368fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a24da4-ac6d-42c0-aa25-43a28cbdbfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cdefe2-c4e0-4578-b508-1bfd519f0b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad09f540-5b5a-4d0f-8edc-78f80922cdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfc753c-b554-4130-a40d-f61ea3b37039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73e8b0a-cb54-4824-a7b1-f417d3163e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1c54eb-4dfa-4bba-bb9c-34dc13cb0cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892366d4-3257-4b43-b6fd-19b9da53a099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1423a64e-3251-448f-82c1-74b15e6d5750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccdd98d-af9e-4178-9fc7-9f6703a99655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0046dbc0-1624-485c-8bc5-2bb524035dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8901d9c6-2010-4c5c-823e-4691ef9b2c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd053bff-4bd6-4303-8bf0-c0bd07d4dc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a0cc97-f1e0-4a97-930d-8d61010440a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bab872a-b6a3-409b-94cd-3f41bdc11432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10227054-6033-45f2-96dc-e54161fb0823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96484f8a-af8c-4a94-8c5e-5ecef6f78306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e6208b-3f5f-4ef9-9daa-eec59345fc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8603fe0-7a1c-4897-969d-289cfdd63fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c3e010-f46c-4499-8a28-cf74c8efb888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fcdcac-79e2-461d-8001-00e2e62506e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cdee7a-845f-4618-b627-543da75d1819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd5e803-7942-4fba-a25d-5783bb7befb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afe40f7-6422-4f00-8d82-8f59e137edc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70954dec-38b2-4b8b-9fd8-eb0cd815a87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0518a938-3566-43e7-83d9-a1d47384fcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a4363b-e6b1-4b24-a0df-3a3e1af33a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e465552-f2d5-4872-9348-b6d3f88ebd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef61f83-2570-42ee-a830-69a32be9f448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c79a19-6548-435e-b57c-2770f789f072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6839a21-6c93-4e9a-9dfc-5c292308c53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ec02f2-a5b7-4cfb-9f41-1a619b5bcf1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298de14c-707b-4bbb-b93e-cf025bccf211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d1df88-86e5-4e58-b7a4-ad92721fc0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0807c8e-038c-47c7-88a0-073a64987117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6b38b2-2beb-42fe-8293-735f8dce6ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d8be79-4a3a-446b-9227-0f31b4b35dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb415fd-05ed-4625-b547-09de128301c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f37c3a1-7c9b-4d4f-b020-ed774bf0441a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34eef76-7c2d-438e-87ec-451ffb62e0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc76415d-9cab-4342-b293-c044bfe47a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adac806-c615-444f-9c4b-952ab603f954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ce1c1d-b00d-44a8-a2f6-31d7f10ee239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe5a69c-0d5e-4cdf-b1be-90442d4a2b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5b473a-8220-4e0d-83b6-335625c9b8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a7f903-c2d8-4f5a-8de7-67609b6955ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d662b8f8-6831-4f22-90b6-32ed6f628eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490eeca6-b307-41b4-a2af-210a234a9a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccfdd04-111d-4fc8-9977-bc8a4497ba36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af9cb5a-fb83-4bf7-91c1-7ab88e0f7ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222f9ead-dbca-4b55-832b-0cf2632e47bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfb98b0-1f39-4b99-9540-026cebc4eb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec442fe-540c-4ad5-b8ae-0ab82049d580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9d271f-b115-4df7-b21d-372a823f1143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85233164-83a2-4b8e-8097-33961a5a3275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4610c562-ae3d-46da-9c44-778d982e66c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467cf936-be44-407c-9b92-cc915a3234be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ac76d0-35b9-4849-b028-5d3e850009a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dbbde8-4727-4c0e-b0fd-fb03edf09ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3c68a1-333e-4753-8f1d-ee25f6fabecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a2c9d4-f3c6-4a86-8ef5-f082aa8deaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f432c129-92f6-4604-9ef5-21e93501940b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da72dd09-9b42-4e9e-b190-73dc0636a497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22f2072-4d2c-413c-82de-290d8b53cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771bb793-59e2-407e-ba16-589146cb8652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e8b554-d564-4648-bfbe-92b81766b487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b953e3-118e-4395-856e-26bf09e7abab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affcd04c-f3ce-4101-a3ff-9ac2527bcf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8291499b-7e49-4647-b0a1-8363be2c29a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e32d0c-7e23-44e3-955d-4333dd37d9cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.28.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff862bcc-fdf6-42f0-8dc1-298252847222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a19001-6fd9-4cea-92f0-d163c53362c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0289da-a632-450c-a90f-6821685c8ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051adb04-9939-477e-b5c4-d52555c69ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ea66d1-7d1d-4909-bacc-9b5151732296", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.236.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3df910-b0a5-4ca6-9b8b-5b64ddea2d05", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f072bca-edff-43ad-8289-d2881fe5e785", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9f671f-7990-429a-844a-80a2b44ec294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.8.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d17cc08-a5b1-446e-abb7-ae9a443b2dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.92.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5aa4c5e-cdd8-4606-8d40-f4092504c0bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.28.242.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48373556-4cfa-4a80-9101-b27a84eaff60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.140.11.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7c947c-70cc-45ac-83a2-6556fb0ad1ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.156.83.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d762034-9430-444f-8c65-b8444c74e48c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.207.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89874631-bd27-43d7-8b49-4491ec643653", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.114.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0d331b-dd16-41c3-804d-3464b112d1a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.115.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0614492-86d2-4e5c-a78b-04bd70b5a68d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.122.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2080356e-9a21-4001-ada2-32bd3cc4e779", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.126.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8ff553-f6cc-4e93-9b1b-2a825fa3be14", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.66.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca7321b-6826-41c8-a130-242e8a89199e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.85.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059705a7-557e-46db-aa61-d6078b19445d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9da34c8-2959-43b3-82c9-68022f8c0b0b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd450bd-3f00-43bf-8ff6-b695bd8f6060", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.251.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a2fe63-d3b7-44f6-bafa-9ae7f2963330", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.154.202.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd7bb21-7fd8-4add-b1fb-b806bdce593d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.154.243.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219fb4a1-2193-42a7-bd21-a9a982937c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.122.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd83a6e4-bd7c-4c70-afa4-2cbf7869ef55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.69.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f695dd3e-87a1-426e-9a3e-9c21eb990129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.81.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83a28f4-951b-4cba-aae5-bbacf1d07339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.87.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad207693-4216-4a1b-9001-752c368786c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.88.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750e7119-183c-4248-a787-9f205a6d5d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.89.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4274ba00-b83d-4342-aa51-ad44b60cfe25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.228.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62316370-dbaa-4aef-b4e0-d79b04e370d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.247.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86671e7-7c5d-4008-adb9-4aaabad71c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.104.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37038321-ed67-4be7-9acf-400d0fd84309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.108.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b558cffa-a0ca-4d34-a8d3-28db6336b48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.97.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742b7db1-3b64-4f2b-92df-e487e9d84ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999ab091-8b98-44f5-a4c4-2e335be1fc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6ef23e-c171-4353-903d-e878a7058506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382d242a-7095-4e0f-b57c-86ffc282a21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8f2ac9-6fdc-4998-81cc-681ddcd5b783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e7ce0a-9ddc-4ac6-8e5b-94724135d7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3767a99-26e0-4dfa-b95d-ced658291c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f468d8-de81-4e45-af81-570a7725ba52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0138575-a732-411f-97f5-3aba3f614356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1224330-7037-4776-aeb5-85a749b7395f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1d1c94-56da-4557-a5e9-d516d1b5680d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120cecb8-31fd-430e-9263-46d3ffe45edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0777c6-8c81-4c89-b4ae-f508d3339946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6b3444-0d8f-4cf4-8e0b-99b7ce8f7e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d504e-619e-4da9-a5cd-97d413e8af1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9dc89e-2787-4351-8de8-ffde5640b730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3f4d55-c10b-418e-983e-6e3e3e756504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba94164-2d07-444a-b103-0d6f989a14d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d5e594-7fd0-4a1b-8f61-6e5ac2f612f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c790269a-3762-4b43-8cd7-920b013bd639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15f97a2-13da-4b7e-885a-7cb054d1b80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925c8b3d-fafb-4934-8fff-2e7589e88ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f89d292-ee34-485e-8827-541bcf8217ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093bef10-be5d-49bb-b6c4-ef377243ba06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b03858c-59d6-4399-8a68-a5ab345acbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b050c50f-1d9b-494f-94a0-f2b9047dbd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa79bc43-36ed-4ced-9568-9aeb1c18010b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96790fca-251f-44bc-ad93-8c0ea25472c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d45f95a-7624-43af-a4fb-48ee3d37308f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab374c4-a9c4-48be-95bb-d81f0831767b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2eb07f3-ade9-4a31-bce7-ec0e4dd1f463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3983318b-2354-4b4c-98ec-73381b1ddefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b35e58-6c65-4cdf-9701-705dddd5476c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829c24f1-4b9e-4840-b87e-3993fda5fd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cd1a7d-d783-4706-982e-a46779a69532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0b0e22-787e-44b2-852c-c02e78603104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b77c03-6513-4a81-8f22-cd6b271d68ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9a1747-4f43-4eb3-b22b-422850f9e64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aedefcb-0e3c-4b88-bab4-408664e0036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dad12d8-3023-499a-842d-79af55cb382d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb1d4dc-89e4-46eb-9233-315c2bb93098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182cba30-4995-4a98-9d6f-ef3397b2d4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c631207-b65f-4c5b-b872-69f04216a60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1675e373-b830-40c5-af2f-50cd3f75631d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73760491-6a5f-4b48-98bf-3c0a88a3ba5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39776d18-3bfe-4302-94f5-89ada9410940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f17761f-00f9-4c02-9f41-16a9e0368a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79076c0-7a04-495d-9bc9-089bf80354e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e21243e-b4a9-4bf5-a6df-8c52823206ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9445bcc9-9ca1-4716-bb7f-e63a8a0676a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03085fa8-0b5f-41c8-90fc-6abb44d3e2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458398d9-21fe-4c51-a515-f9361b182fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a981e269-2a75-45c5-88f5-165d47c510ef", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c69861-44d2-4af4-9b09-76c19b8cc13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d5635a-77d8-4f97-9f73-a5e54e447545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a58581-9af4-4f90-b144-2d1f03a1b5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64019df-606c-4a03-8ac3-b0467575c670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98e8a2b-78a2-4a3f-b62b-136350319ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fb540d-352e-4dbb-a871-b3731b3fe903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8d0924-0612-4f91-9d73-4b7d02b31af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25678992-376e-4cec-9132-145dd67af418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ffa698-b1b7-4e70-97ae-1a036fa35a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eba586d-e012-4e98-9c5e-e058c543e316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75337d83-9efd-49be-b27d-7b23f031a05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad29274c-99d0-459d-a063-3c487a4abb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88080dd-d8ed-4c08-82fb-0baf7499637b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a1933c-95fd-4fa4-a73d-f6707b2b4632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233372ac-24fc-491e-a1b6-ac78ec4fbb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26c3029-e337-4d5a-b509-4e055e49eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7fef13-8f2c-4ebe-a2dd-2cb003b39702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb2d91b-1475-4548-af6d-1ab9170f8e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c64714-ec29-4aea-8d54-11f1352be4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547d71ed-9e5b-4bef-9169-5c8ac9d4bd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efb3506-dcbf-48d2-a10c-22534827e3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93c4e1b-f0f5-483a-95fb-d0a5c4f6a2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d88c64-e7c0-4f41-b290-bd65b3594dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0204e8d2-9137-464d-a001-376a512b02d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2ff235-47e0-4e1f-a1c7-948e8c733447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa485804-3d3c-4287-bab5-21929e405d3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.168.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f514b9c-1747-4d7f-adec-85a97ce496bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.240.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a30ca82-3169-4596-b68b-d7605820e0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.37.119.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db819d2c-d5cb-415f-af12-198c477d0978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a21683-1f5c-43e7-85f3-fd5433a26c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.202.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3639304-965a-4327-8a18-661868569dbc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.135.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0270d255-9995-4b40-bf72-8e8bce25a343", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.164.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e24cf-8bbe-445b-96e4-90033c088dc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.177.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7520fb89-4be9-4bed-a793-8321c98b318a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.187.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001b5e67-cb01-411a-8daa-b9eb8a4d4a20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.196.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a7c94a-ad7c-4339-bd6c-b62570544f97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.216.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1030975-2708-4b19-ba71-8f01385c0d86", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.219.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af072d1d-1c09-4735-9ef5-f2a64ba187f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.225.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370b1986-41ff-4048-8211-b5ffcdabc77f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.226.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cfa5bd-6fdf-4f14-8185-c0d61bd283db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.229.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59ff74a-8aaf-49d9-913e-850b4b90fe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0f9d63-240e-4e60-81f1-25b1870dda7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6e64f4-fe5a-4db5-86e7-91fdeb7d8f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c25189-b8e3-43de-b73a-63f6aca7b3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac942e80-2e1f-4488-a9bb-2acc46f7b372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bb0d25-a447-4d5e-9740-a1adf3f5b7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.248.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c056ca80-01c6-4da5-9a79-f0d93094b80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fdea04-a7f4-44e6-8f20-41abaf470784", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.231.163.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dd6e76-d7ee-4b41-9d42-f0bede818f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e8bf42-b959-4c46-b13a-953629a6676f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f30ee-c706-4418-b87e-053f234eee73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df3aa4e-b856-43a8-887c-1819cee35d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b937ac5-0201-4705-93a8-fde245df6180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b901d182-9fd8-4c84-ad58-35077bca0322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286e62bd-847e-4b06-ade7-4096b52434f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ea3aac-af37-4a53-b0b7-9d20604ae2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aebb9f0-de24-41b4-8fbd-a95aee9a614f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d4fb1f-770b-4f78-9f0f-3ac5a1b73519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6392c22-88e8-410c-9181-e44b9d374942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170307fa-1150-45ce-9daa-598bdcc83736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be69603-32cd-4338-8714-eebf69725325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4a5d92-fc30-41d7-ab94-746172eca62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9a00f7-e086-4679-a46a-aae189ecb3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f710ece6-befe-4d72-a467-5eb98c416b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b788e5f0-c47b-429e-8c0e-6b2c962a3043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1921f0-b493-4a6d-a136-f9cab392467a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d29c7a-c947-4552-a323-67ccd5f271cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0683f34-5d0b-487f-8cb9-ce99be927c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe17648-ce4c-42ce-a66a-b4ae75e2bf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfbc296-1497-4f45-b373-54e8d3ade3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ada0909-bc1b-4c2e-b319-70237902e132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adafd826-e52b-48b7-88f5-5f7fb8ab2d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c19bb4-7d8c-4946-a483-9cba17690721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3894ed4-5d79-4ab1-887a-15b6c1c41f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959db207-180d-4f98-ac72-7f1cb8cb3bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2c85bc-910d-485e-ae79-ed763ae96ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b20f515-bbd0-4fd2-bede-f9bcb7abb9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ebd47c-b00b-4a6a-ab1d-5cff7455d2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c079bcfc-1406-4c4a-93a2-cae8c7890257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749a0dd4-f4de-4205-a586-3ce2de60fa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569c7c7f-d8af-4007-adf5-410363f23172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.1.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae72bc3-1308-4902-a0bc-395b3a995a75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.228.163.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddde653-b3bf-4189-8675-deca139f01e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.20.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2d2f28-3923-45b6-9b3a-58ceed17533d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b87f25-6589-44cb-b629-5187c0844de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8cf2dd-ab6b-400e-af23-d1aa26584a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fe3c9f-0ddd-4abf-9a7d-c841613d5c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.98.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441a662d-4f63-47e6-b4e0-d6e9385338e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85790de2-6539-4f8b-b564-d924250e999c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0386d4e5-3759-4ee6-9bbe-aeeb67a0becb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0498baf-e564-401d-97bf-94744dd0a9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062d137c-30c6-450f-a877-d8a253ac410f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cb3833-a263-4230-a087-519711d27e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9a8a98-f024-4743-b746-97f95bd7d3cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.116.34.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e53a362-f8d6-4ead-a792-ff9d1ddd7483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a233f68-1269-4ac8-99c8-d93edef2b598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891522f1-b6e6-45a5-ab24-db906e3b47c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535dee7a-f314-4a71-824a-5a53a315807a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.102.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a0a00d-bc70-4f5d-b186-431d8fb238c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0934cbc4-6e9b-49b2-b65f-c1ab486e2c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90900a81-c538-4b19-b5bb-f90a62a51415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bd5930-ecdc-4bbf-b450-06a1f9ff2d08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73586c8c-3607-4c5f-b541-518ec8ab61ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c67426-17ec-437c-b8ca-de2632dd4f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc70548c-c81c-4036-a939-bec53312c28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d9355e-9d78-4d30-ac20-89c28ac41abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.238.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03db4a58-5830-4cac-9819-b1093cfa7fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5444a314-b70c-4e0c-95b0-ef8d2c08729c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.13.164.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01708783-77a3-43f7-9215-cfccd932cb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f35c86-4205-46dc-8d21-821b6199c6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70708848-b035-4fbf-90cd-e8a6680a86e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0e2f31-0245-42db-a654-3e1a5266e8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.80.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f46deab-223f-41ea-8a1a-54794388e71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e30ed0-db1d-4f1e-8bef-6bbeb2a8def5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec59f2e-af3c-480f-8274-432070b875bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0962af0-30ab-4634-84ef-fad43b68a0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf8b188-1c6c-47e3-b688-e4279d24e4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b7f137-a20e-4b62-a616-f072c38eedef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce1e7a0-1542-4e9c-9fae-988b291c9fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.28.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea2bfca-494b-4d31-b82d-2a1420b2cdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.30.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9169d6-aa75-4ab1-aa53-e9d672184981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.44.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0a1b17-72b1-441f-a2d4-7f2c1e5c0646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909a29a4-34d9-4716-a465-793a5855da09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550251ad-4201-4ba9-907b-5b6da540dcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e2ee4b-89c1-4036-9f91-8a7e3af9f14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae65775d-9b87-41d5-910b-0d520a1116a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5f7fbb-c4ae-40ec-98a9-1c8e97f93061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c01d39-7682-4c19-acba-d0d88e471644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09100523-4a46-4b79-b180-592541cfb998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765f3f10-a05a-4168-a84c-9fcb9e559b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89df5b2-6441-436a-95e2-168d41f87959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c59ffe7-6c3e-43d0-a2a6-c41774bac59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bc12e9-e7e1-4da2-9b97-8504df5d7481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c91d01-58f1-4e19-bf9c-c5c72d119875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0558a91a-ab84-4083-927e-961cc7b10ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0689f516-dda2-4663-a2a4-4d5ff83bfc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd04e0fe-8ab2-40e5-b262-a821b6905666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d413199b-0df1-4d90-bb55-8b08e90b4180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebf7328-0e04-44d5-82d4-042569a61dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a666ce10-68dc-4b90-b40e-2b5f02c88cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc87585-10c0-4ee6-84d2-e0c0e7a6305d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f1eebf-a6aa-4a36-b59a-c4ada2a604bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d69b1c-1d96-413f-9ac1-8a382d504c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fce807f-7d6d-4cbd-a46a-a8bb211b35ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b1f62e-ef70-4101-be17-e20a216e3235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b88e6f0-08ba-4f53-bbc8-7c05a7473794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69154b06-1abf-41d4-b21f-1c602022dadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427b0e1e-48b9-41d1-a905-74ed606c845d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34510df5-2cf4-4011-85c5-a7d9a44331c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562826b6-09a4-403c-a073-e53e3a8237e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d9cb23-be7f-4d22-9289-1551140fbaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae11a69c-b579-4825-8771-079802f624e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d087b50d-9cb2-43bf-9e6b-c2c3f5ba1a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97df3ac0-553a-464a-b4e8-7eda39683261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6e7beb-da82-4ae6-8932-d8276d0e96cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bce19dc-7d85-4e5e-b6ce-d5389d09acbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1272a00c-6bec-4ce6-aef5-32c50ab68e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb4e4fd-ca21-43b4-8e93-1fa76acc6f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b76be43-bf03-411e-a517-4c699650ffd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e43a24-1712-4158-a992-90333f827735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3934c47f-e269-4d9d-8246-75280925d95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35846f63-98a0-4b57-9bc2-74eab141d9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f924f0a-5121-46ca-9512-aa3b8d6cb2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5a2179-2ec4-4749-af1d-24d822bdcf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc90ae68-a39a-4be6-ad0a-4cd6a0c60b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6667197-42a6-4d22-a246-2770a7f5f6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5757327f-b7a9-42e9-99a2-fd1cfe621b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ac0067-5471-4efb-9011-ff38f604b383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7f2852-52a5-4acc-bd99-fee47fe76959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eff31c-3090-478c-a781-455a8e6ffa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a891c72-e33e-47ef-952b-45dcb7269f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a5a54f-d42d-435d-bca1-4dbc5d3b60f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f4e77b-4633-4c04-a00e-0e58029ede62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.189.204.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6bbf40-e8a6-44e4-b6ba-f0612e206581", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.42.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd7ecee-1ba8-4837-9bd3-d3004350be09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.80.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fc3332-74fe-4823-9ed6-92b127a720a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbab191-9b32-44fb-b2a6-2d5fd77e7cab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.220.34.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe3906a-8f9c-444d-9794-102800c618fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5fbc60-01c1-4a57-80fe-7e25efc499e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a87578f-e5bc-430c-80e0-435cfa317e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae09fae5-bbef-4a10-88b4-c83a6e095875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44956cf5-f1e6-479f-9581-eae668517fef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.179.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7ad807-bb99-4a45-b8dc-fa3dfab2629b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.229.115.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a2a164-37bc-454d-8695-331e04530616", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.90.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78de9c09-768d-4eae-b910-63f042e5fcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1068662c-401e-4149-aa27-847cf19dd199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeac2a7a-4d99-41ac-bc44-7ff67a519405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47188e9-6aa5-4613-ae52-330912f5d08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9343c40e-b27e-43dd-8841-ce59b76dc56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940e617a-3e03-4d87-9511-ec6d278fbcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.42.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb37e178-8d75-40b7-8ac8-dca57cc611dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bc6aa7-c238-4115-82df-32a4635f0b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e48684f-987b-46a9-aecb-484b8f905e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d18e2a-fbae-4dc2-a525-18cf5b34ed8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.52.16.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb94e153-d956-43a8-9cec-5e3a108df636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.118.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c38f57-f329-4481-8a99-95afdfbe66b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2d9bfb-d2ab-40cd-9b8c-ccaa229e396f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83fc5fc-b1d2-43d2-8a6b-4701578d5522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc148e0f-33a8-4c9b-8f76-7df04d251435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bfe497-465e-4141-a3f3-65c0ebb627d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8cd585-4ab9-4897-a79c-ca889f07b61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.99.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcf084d-0ce0-454c-a950-db89688383d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.58.186.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ee2e5b-e2c5-4776-af1a-6d0c5dd42588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.198.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ee9f0a-fb26-42d7-b50c-ec261ee3b213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb30a57d-f83e-49b9-8ecb-17b031a4d078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1915e3a-1f32-483e-95d6-f961df1b99dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c69cfaf-e75d-45d6-8611-b7739ff9c40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed2eb1a-1400-4ebc-a8d2-673f3130b094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834a5994-6a39-4d8f-bcd1-438a3513f543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb815f84-4cd0-40ea-8ac0-7b0d922842d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a064fce0-f352-4a77-a9ac-8fcf36e186ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdb7f0c-7799-43a5-87bd-e477070ef657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623aaa92-c471-4d7d-b99c-93faadb12faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22361af9-50a4-4a95-845f-f55cae7cb181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3a6e03-9027-4090-8abe-1ba210ca8b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0282be45-7b84-4567-8ec7-ff0902a86491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f40dfc-758e-4c85-97f8-f318362d35c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049b41c9-e4be-42e7-8ca6-5323aefef2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df91089e-c3fb-42a4-9499-c6791b9519ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3313e58-e7f8-48af-bc36-d34a3a784183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3866e5e-3b1b-4bad-a04a-8be53020a514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4128ed38-fa0a-47d5-83f2-ea6ed2e87a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64236a1-b3d0-40de-8361-202053b9072f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d622c123-dec7-44f2-9790-e3c936992756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e74815c-315f-4024-a90a-4d67cf6a5dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b395b018-47be-4233-8adb-45856e49ab3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2dd59a-e0d1-4d7d-a009-1f3cf69375c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35607266-40c8-494f-ab5b-4d29feee55e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1649e29-187d-4e0e-a9fa-dd5cccdccd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a476db2c-2ed9-44ba-9bcb-3e9c11dd7159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7918d74-9f10-46b9-a666-49b1d2a14986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9787256a-a16d-45a9-a134-4bd443247281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd4dbb2-373a-423c-9507-0bdf2dd4dd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbf88bc-20a7-41ab-85ae-32ab45e4915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f58b91-3c98-4504-965f-3482a9fa00fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d96910-28a5-423d-a6ec-fdd7ae0a84cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fc59dd-039d-4067-a945-d0ccb97e8936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1e628b-99d0-4b5c-9af4-208c8c883ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561db47e-f6a9-41ec-9214-9ff0322e78f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9c9f07-1574-4922-84e3-f1a41d557c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ac2c5-e34e-4353-8fa2-623bb12bab31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284c4794-953f-4617-8485-b6ab2b0c3428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9737f8e9-738b-4c84-80e9-086751465507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d56d14a-5309-40ed-a470-cc3d1e52403b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888cbc39-67c0-49b6-ad9b-0698ad196bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e390f701-7bc6-4972-9091-943856b1c22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cb63cc-f1db-48d0-b3d8-89e742997c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471c2ab9-9916-42ff-ab02-b08ff0d66fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0ef237-9d6c-4851-999b-2ad5958417c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08be803e-0e16-4496-b58d-ac4a5c5b8256", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6651bb2-b5a4-4112-8127-7af8bee3c0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14740ba-38ce-4dcf-b2eb-736071f4d681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1b1a2f-be80-4927-a1ee-ffd85f18f401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fd9a61-0fb0-4085-8045-9b6f12ef66ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a86ba4-6036-4102-91e9-563a50fe75fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992da437-776e-4ae9-b6ec-5615594ee063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4d8c52-c109-4217-9dbd-b7f34d23b3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd9472c-1c5c-43c8-80cc-ce280b3d959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38692ff3-0d61-4123-9726-dc3b81bdb2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497f6698-4eb8-40b0-acf8-92e61666b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b1a4d6-ad7b-4083-8c75-06bd212d41ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36a7de3-df3a-47ae-a46f-43cc9fa6fe62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.113.202.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7987d1-7c10-4d87-bed7-3f87ff8d8df9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.118.150.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c438f2-a4ae-4bdb-973f-8554c09cc47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.140.205.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83d035b-4698-41e8-98ed-6d0fbcfb6218", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.16.238.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b7488c-40c1-4fea-927b-9f6521bbc7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.146.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b7a6b5-d6af-4cad-9ced-72875bc3e97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.182.223.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c5d496-814b-4815-8224-6d1c8c81efca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.54.235.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3cdcd3-d682-45dd-b851-51f6fe3bdb53", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacb468c-5029-4107-aedf-844a7f3ea956", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bdf2cd-514b-47d2-bfa2-7e161afbb05b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22969c4e-09b5-432c-bf56-162c35897fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.162.199.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3087c4c-0347-49a2-9cb1-535135dcc279", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.249.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ef2867-1cf0-4d94-b572-91ae8c1e0613", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.38.172.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f65abd4-5efd-46e7-b074-0eac8002106b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.5.200.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675f6237-189f-4269-8486-55e21fd354fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55102e5f-8441-4e1c-a49a-3a0e52a10269", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.79.29.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79206647-53a7-485d-a0b4-c558a7b7d35c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.146.102.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cde28b-c0ff-4e96-a90b-aeb79d47cf91", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.150.107.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1cfd4d-c57e-46cf-be80-682c6f9c4af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.153.33.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99bd42e-c6be-4f46-a95f-d820ace1b907", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ba54a3-c621-4ad7-ba48-337687f9da62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b03b34-5166-408e-a63c-a959c23602ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.212.9.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e401d2-669e-4a2c-9a07-5ce680843b56", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.23.128.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8357584-d3a1-4ceb-a0a1-a8adbeff7f72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.23.199.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11dc456-b5de-462b-aea7-b5b1e888f087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.242.185.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dff5b6-2587-4843-9b1d-5bf3fe289a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.3.119.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e88f0a3-449c-4fcb-a784-bab523d4d8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268a7487-04c3-4f75-a77b-1c5dcb7561c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d055158-ca0b-46c8-9c52-56857c8fe3a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.168.176.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710489ec-66ea-41d2-aaa4-94c32afaf91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.16.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfaffcb-bd32-4445-a698-4da071642d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.20.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c9f5b1-69ac-4f02-83ab-3a09c762d59b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117d19f8-2ec6-491c-8bdc-25c7880b5fe8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9761f6f2-3515-439b-92c7-743d908b48ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.118.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee75d49-fad9-45eb-be8f-6a95a4c5223a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.209.64.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0fa06c-ab9c-4c78-b585-57e81cf7f62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dcb18b-4f8e-4c23-aa69-55978b0b3bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16486b9-e009-40a1-929d-783f0c8a7737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0fafb2-9ab0-4b8e-95bc-f0ec86475472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c365c52-9abd-4850-9125-816eb056c740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25422c40-b3bc-498d-b5e4-2cf06c21bcf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e74c485-2ccd-4543-b1a4-39b2676b1422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ab5a0c-cb5b-4cd2-904e-b7b7706639f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e168b4f4-6b10-407c-8a95-222fe4140fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9debc93-fcb4-4594-8994-815502c880dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f350051-9e98-4ec6-a60c-578dc8151884", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd279a75-cbae-41b6-97f7-e7e1f8117d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99bba69-37fe-47a7-a0c9-02e8f22b1e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe202f53-84b4-4b79-a69c-54ad4354166b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2898500-2b14-4b45-8416-fd896578e076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e55518e-63ab-4c15-a398-b72fc7fd542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f683af0f-a00e-4a54-b858-207120615874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cbe50c-d0d0-48cf-8bd3-b00342a1e212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b887ff8b-f8ca-4fc0-9164-b29c5edf22dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ef57c0-3774-4438-b0c2-42c65184fda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d455974-2bf8-472a-b7fe-9de9ded725f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047f8fd6-82e3-4901-b320-38446adc8f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3df44c3-d2ab-4575-87d6-5ce775d27e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370971cd-0e75-4806-a7da-a9529a83b581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681d06a8-eb98-40ff-a2a6-004e2a4f91b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a0326f-497d-4111-a7a7-210807589802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c77808-35bc-4592-aeb9-3fd2d6faac2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f80bd5-894e-4a59-bdad-f35a60920fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2cdc0a-fcf4-4083-87e7-ec1a10a70e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437140c5-8ce8-4f7a-9068-f3d84ba6ed66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8a0520-051c-4ff9-8a2e-7e685113b89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5146731b-1e17-4f3f-82ff-8a733b6360a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59aeb77-5078-4777-8dd2-c3d441ba4be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60beb72-3d51-4875-81b6-74fe6a69c261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975d0fbb-584d-4327-bd50-b6f855b0b174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5db3e83-e494-4345-be0c-49e0d07b767c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c413c6a-784c-4a94-83a2-10654a6a3e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8644452-3e6d-4d80-b45f-d8d81e62b254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26620210-8ecf-4c22-a701-c3e19104857c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1ddcb3-c5e2-4ccd-9d14-1b8cde640a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39092b94-aa1e-4be9-96d6-c286750a3ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb3f92-a3b7-453c-9bd0-2613471e5688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b3d56a-b8d3-495c-97bc-85dea58d7b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4297c705-a492-46ca-a0f1-8c2c4fb6e2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e6fcb5-76d9-4a56-8211-a66498c24b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375dd917-2f82-4e2a-8f0c-dccc6deb850d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19437582-39bf-4876-92b4-4704f14d7650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5841a0fe-98c4-48ec-81f7-f9c9726276b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cba78a0-a13e-4046-b0cc-8dfae5ced0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097eefd5-a414-47e7-b509-5616f9cd1e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204c96e3-0ad8-429a-9534-4ebf918c08ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924f72f1-c68f-4858-9d3c-f090805ee0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5299a2b2-b0b1-40fa-b3c9-0c0acf9caa34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d426f1c7-aa58-459d-ab2a-7e61f793f3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acefc834-e370-48f2-b41b-beb22bdf2808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f38810-b542-4275-885b-c0503e449c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad8662-6649-413b-9d8f-635d4afafb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84b89d1-d2f3-431c-a150-3a8ed4ff8d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088bb06c-3320-4637-a5bc-c5deba3925ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a2771c-d3ab-40d1-b470-3f7374d9914b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4febdc-1b32-4bdd-8284-8e20330c145e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2377c5c4-417d-49da-87a2-ec04b0236f6a", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60586a7b-ac2d-4b21-a15a-950974bdb70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c3482c-c76a-45d2-93aa-ec8ee7795bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d6d2e0-d48a-46f0-befe-6552c495cd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed27ecc0-ca1f-496e-9904-48b5bc753ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cebb85f-1323-4f5f-803c-1297483a8dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d911da-fc3f-480d-91ed-1ff8e1154d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c00136-a9d3-4d98-ae85-f3f70bfa1f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8d654a-cd7b-403c-b15a-c9222b2951d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2046b233-a3ff-4181-9937-70ab888bf1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666c5e32-367d-46e9-9d20-2c7ecb961a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32472d44-ca6a-41ad-b816-eef6c0a6bbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b7887e-e799-4e6f-a2cd-c4a00f98b4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60508a26-dc5c-464c-815c-c9be232a4589", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0e1715-36d9-4c13-9826-f29f395e5566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d280b39-db2e-4c25-a205-987081d85d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4427a281-5076-4f9f-88f0-9beeab9bfdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fe9ba1-c544-49c9-b3cc-6dee4d860ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2ab9f0-28d4-41bf-8dee-9aab50d546b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987f8fa7-2885-49e0-9d54-55e52f595bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff79657f-4b41-477b-9c2b-1ca955640820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf109eb-52f6-4868-a8a0-25337491a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c939837a-d11a-441f-8e81-f8ef8a562554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282330f3-00e2-411d-b595-a768734d52b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac85344-2aef-4c39-baad-b357d42a5f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3c0788-5467-40a3-9f3c-4bb0ea8d6138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d796103d-4f2c-43e1-83ee-42fa49cc20aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26ebad6-af2f-4deb-be64-8f5a396be9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0f6d9e-9ba6-4f60-8cb5-265b6649b99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d1ff73-cfde-48b2-ba79-918f6803adda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7925a7ac-8769-4813-ae7f-f489b5b101a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.174.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead44f4c-1968-4854-801f-2ec2a86c467f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.22.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24aab06-2aaa-4501-b29c-4cd4edd7ccec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.180.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70933180-c739-4979-ba61-9dcb3745b1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.206.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49984941-e2d4-4231-affc-c23fe79c3e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.232.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34a511-d911-4a3f-8687-41917f3b3ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.239.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2b9b22-a333-4355-97d6-696ea4511eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef73416d-0798-4986-8677-104c1dcc07b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.99.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8346bae6-989f-4c83-a344-c02e9e585317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf832d5-40db-420c-8841-6aede68c3c7a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.62.67.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4cc1d1-c285-48d8-98a7-1fd37342c7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.238.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c48595f-4f38-4919-8f8a-346e158c558d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.25.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751d8f52-5603-4cfa-a7fc-c9c40b784e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.3.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e28ae60-618a-4b6c-a1d5-b2f8ced7965e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.70.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57d3229-4508-4fdf-b9ba-e97d63d74716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.74.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77a1621-1df1-4212-bc0f-5ff0440f123c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.241.173.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c609ae19-6392-48c8-ae18-12d461d3fb3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0a56b9-7879-4e1f-bc38-e023a1c04232", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f148bca-3d69-4c30-82db-a93f26f85f11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7037b6f-cd73-4018-bbf3-f53d056a43b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f041f6a2-1acb-4c3c-b8aa-f6af5762af96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039c2470-85db-45d2-87fb-9ba9904d3f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9dfd6a-2e70-474f-94c8-1ec4f3947bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3865022-03bd-4865-82d7-debc0307974d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d4aeba-f619-4c74-974d-8818655e424c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef31414-47bb-4d2b-90cd-b12a204a8e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c22c8-c66c-465f-b05e-916226d8b30f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.247.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0393ac-9101-4994-9367-aabd5d543c12", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.52.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202d7f3b-54e7-4313-af6b-ebaab6290b23", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.9.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b01645-8b6c-44ea-9b1b-ca27e0df7999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9f8571-8a57-4463-a172-148ae7ed4e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d9de84-5fdd-43dd-89fc-d1719a2cd7ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.122.41.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094b3790-8406-45d2-a4d3-2ec8f5cb4418", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.41.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978cc6d7-d439-4471-bd30-760960f48404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.45.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c968ba-2807-471a-aef9-d4fbe3ec38b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6407f4e-d12a-4d2c-90c9-d33f84177599", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.154.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a15739-c84e-4b1e-a75a-16637a2ef149", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.205.201.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f535a933-bc02-495e-8a14-55409bc19bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e748227-84a0-4e8f-867c-55e702439c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.201.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff41409-9024-4440-83d2-1a227050ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf1a6bb-bc1c-492d-b34c-3f2d9218dc0c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.249.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef7d869-4cec-4293-a46f-cd03bf588c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e1a8ff-ca9d-44c4-b450-79fa4adc8283", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace7947d-26cb-4e06-ac38-986df500d58d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379781e1-5a8c-4cab-86af-cdd23de604d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.105.67.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5578d77-71b4-4174-a802-ba96183c057a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2039b482-47ff-495c-8014-2a152632c6f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.212.236.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d894833b-acad-4cf4-8c1c-7a64a49943a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426680dd-cfd1-4c53-9861-772c495cddf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.99.236.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659f2a31-d138-4844-944d-e2c86ef3b890", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.106.133.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725182e6-6478-46d2-a15d-f7bd4a28a2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.107.118.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d244cd-c8b7-4fcf-b6d0-02ade3e8b20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63877678-6122-484c-9b41-cb2b89e48252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06a0a57-9333-4501-ada3-91fb76bc3c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86364f7-331e-47bb-b78c-05cdc975574f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.152.181.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feef25e8-f42e-4e54-ae3e-f8221932aa55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.199.105.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543c253b-94b6-409c-8b23-446c8195a2d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.131.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c856b2-4f7d-475a-be3f-13812e7b84c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.145.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f380506f-4b01-4d88-86b5-72ada5a2af56", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.231.190.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993be262-743d-4e0e-8455-5a51ab4083e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.69.135.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0558a98-d368-4d1d-92c2-0761ee5d777f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.135.175.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6334b7bb-574a-4248-8b1d-61fa4df21d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6b398d-be96-4156-9651-f9a9ae121ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62728a73-6fd1-444e-9be4-0df14ae7a2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb2b28f-25c0-44f7-8aeb-aa7ec9ffb8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938fda56-7876-4557-8392-948d2aa5353c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff9d59a-24a8-407c-9c1b-f2a65878367b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ff4bca-500f-4712-9a5c-f74ff5fdaa17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3cd42e-07e1-4a46-a463-a0d60cbf6d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c6a504-22e5-44ca-93ff-99d592d77370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44fa438-9c7a-4fa8-b55c-0bdd32e63beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db9e4a9-65f7-41a4-970a-19a18c102763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dc51dd-05cb-4782-b991-158fb67e6c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4705414-c6af-4486-97ba-94a107fae006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c1e0fa-b8c4-40b3-b841-0a88b179d8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca80dbf-8a8a-4208-b1dd-745666c071be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00afdb9d-9d02-4a62-9c3e-f68402517ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45d806e-558a-42a3-ad24-c374e148e7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5805e085-4aef-45c3-b7bc-c72c42fd5052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9016eff6-ffb6-412b-ac08-054e67a4d3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d081604-065f-4016-9a0d-26effe9fde35", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.21.248.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b546d0-09af-4d64-b8ee-c98d7177f9d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.111.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fef286d-dc9f-478a-8a5b-b44f79a4e9e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.176.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abb69df-faf6-47ce-a5ef-c6ea842a3beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.110.173.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf91141-bb84-4740-be79-b04a7d945f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345be22d-d31b-4984-9ce6-23f0b953f1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9e41a-84e6-4921-b20a-4e6936256833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ce4b9f-ffae-4ca7-8f71-fe46587cd6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69056357-8149-421e-920c-0fcdeedf272a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3132d340-7aee-42ef-b8cc-6cd6508b9f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb30501c-3260-4dae-bb08-363662f76b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2289746-5bef-425e-b436-09bea21ca929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7053c22-3e05-4429-89cc-ebd10ccdd645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaa6c9c-e9ad-4446-ade6-e59bbcddb45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132e99eb-dbf5-4d54-9547-a01eed8abf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd02d3f7-bcd3-46b5-897b-75ec63a0f6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb5a1cb-31f3-4607-b230-bfc2e15dd162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f764ca-3272-4680-a9eb-0fc38fdf639c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb42c36c-0e42-45f8-8a97-d1b5b766ee15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921c7b84-8fcb-4fb2-8a9a-9053a68157fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f68471-06cb-4ca1-9e05-220b2b34a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b627af59-2dba-4149-85a2-7b460a75db83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e8882f-1c0e-4184-a9ec-0c0c5927320d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc91fa5e-b4d7-4400-bda5-b32e64a980bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb0cc1f-ffa8-4d41-995b-b1c3c133f5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140735dd-579b-434b-b21e-f287efd7c3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29b0d64-5333-4756-8d3b-e89a8117e2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809bf960-20af-422b-87af-bacdf96fb857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1629c54e-9f33-40ea-b752-00fbcbede09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea96df6a-ae38-41d4-91f0-d1dd52e5fddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88195762-25b0-4386-9a5e-672173233257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bbb8e7-754a-454e-a270-502dd3f3a84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea39aea-bc45-4d7c-a6b3-bf592991271f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66df493e-e7e7-4aae-9a53-c6ba0cd5d817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dda8b6-a41a-42a2-9250-d46616cb7ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a906b2-db59-4698-9fc0-05cce5249003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf672c71-a9df-40ab-94c6-1e6a3beb4ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562dd7ae-b1d6-46fa-9399-f409c139112e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb1edae-8075-406c-bc48-a8fc9fbbe508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72a9546-f40b-47cd-886a-7897f61a1ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8cb7ac-1257-4d44-a476-db970a103961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb5edd1-654f-4295-9e5f-6d0ed0051021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf4e345-295c-4427-92c9-e5f8ed43e5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998739c8-128c-4c97-887f-e4f44e56fb74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5866f792-ceed-4e45-bbee-89ab1bee1958", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5c7d1b-a6f2-48c6-90c8-4d430693cde1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9562e205-5748-4176-8bae-f4284a4863d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2635da6-33a8-4c11-88cc-165a814ae7c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c919ce-49b9-4a1b-9f08-9cdc4f836dbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84fe7e6-a1dc-41bc-8f8f-9b0e3632a9b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dc9ebf-06e2-4444-8444-146f02feb73c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca71839-241c-4634-8bfe-1be9c22dff63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2cc4a7-5415-4101-895d-5494b67a20e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfeb83ea-3371-4723-a4b9-2abe68463962", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0265d4-b255-4b9b-bde7-a7d7400ff068", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499029bf-7e04-484f-a23d-3cd7cc2bdc92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed751540-ba88-4098-a687-09828284e950", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7c5fdf-a47e-48d9-a532-e9b69e60b495", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0d3b41-df8d-4a47-9bb2-4785cb292b96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a492b62f-1b30-4c00-ae67-5b34b1377e8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a11615d-1bbb-40bf-aa03-650476f44a2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24235a1-823b-4e16-a3c3-6eca057a30eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88123e18-d176-45ef-9c28-ecaeb5c2f2c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037e3152-a2e2-40fd-93ab-27783cfb8362", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61df6683-259a-488c-aaeb-b8ee1fa0f651", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4edb14e-8b07-4617-812f-646c6abf3e06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03815a86-1533-4b59-9839-1c061bc5777c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.224.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cc9be2-b085-4732-815f-2a1880f69b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.59.16.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a73db14-76e9-4214-a72c-b41e68ee19e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.59.16.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3b6134-e928-4f8f-8fd0-001a90304d94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74520958-d8e2-4d63-85c3-d1b9dfd0b1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168911eb-751c-44c6-a71e-3fb817a62aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c1b02b-5cb7-4830-bb1c-643c11e545c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48911b57-1007-4b91-ac78-7d662b1cea09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8bc89f-940a-40a8-8a37-174252aad402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d9e952-0f9b-45bd-b41e-fac7dda09fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2889f478-7f3b-401b-b87d-55c6a953cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd21d98-8619-4ba1-95d0-c360f715e200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a11f67-df4f-431e-b75d-86b34da65197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d8d6cb-dc38-4279-816d-a492643424e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afbbe65-b558-4df7-bb00-b45fb99e0e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f66213f-facf-4317-a5cb-7473cf89d985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e3331-bf11-48a9-a286-25b3e637a341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44384045-7dd0-4283-b137-e60d421bddc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e682b9c0-1ee7-4161-99b3-50d3a205c9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd34744-6d81-44d5-9ad5-4354d454279c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3c9af8-2d23-41e9-a1b3-a9ce35edf748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdf142e-14a0-4f87-9202-b2141b89bbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6990c905-d819-4aba-bd83-a71b48b0ed10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.65.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e734ee-1ffb-4052-af43-d241630772b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.79.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96628885-602e-424f-a19d-57939c43fb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.76.55.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59eed8d8-8744-4c6a-9be6-e6f160cf91b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9842b4-d6eb-4539-8edb-8fec8239bc2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.190.8.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d773f34-b668-47fa-a3e8-2da5bf352464", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.23.170.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edef1a67-48c4-4f4e-a4d8-6e63a5ce8b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5773cbd9-dab7-437c-b067-21a032a48d75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.92.8.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad395c5-b594-4259-b070-7410e62e7320", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.118.173.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27f6be9-f214-4e86-b35c-7b165cd3f7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.125.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbfcaca-3109-4992-b154-faed808f635b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.183.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084e5e7e-6413-4d7f-9fa1-7432840fc9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.233.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d86b3ae-7c40-4868-b08d-a16881172663", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17dca50-b282-495f-85f5-5c140e3e09d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b51408-473e-44c5-b41c-41bb8e8ff907", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d091e7d-db67-4731-93be-817cbba640fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.247.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194e959a-5355-4ebb-930b-632c42a18dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.249.15.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f417c5-01d2-4e4e-841f-4fa00aea5677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e69646-1df4-4858-881e-f2f92fbc265a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.88.178.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cde9a8-eae8-4a17-be21-400331ab56b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7696d1a-3f88-42e6-b874-a1aa64fe7d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.161.46.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c13cb5-a3b5-45f9-99ff-6f67f6a38cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.2.109.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66959b03-04a8-4cc7-884f-3eca4258305e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.5.213.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb6c1c9-a860-4d41-bc02-1a63b7e8252c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.102.21.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ba9996-465d-44b0-ab8f-90498d3dadfa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.110.147.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79f9020-cdac-4c3a-aa31-4476a6874c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.170.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e4da29-514a-4c81-a140-da9a7f80173c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.214.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3650cab4-66b1-46d3-9b75-74c33f0fa16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.146.239.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf15bc08-e105-4681-bd02-251afc229ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0cc7f5-122a-4239-9a4f-7105424119bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.241.167.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb46bfa-6837-4424-a86e-c619a203232a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.254.78.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0af0acc-1cb8-4d07-8f6c-5000cc3964a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.71.205.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260beee1-a3c9-46f8-9b25-004cb20c501c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.98.122.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae1a0d-2886-4fb0-84ce-c668f49c70f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.16.117.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999e0bed-2ada-4594-96d2-a62cfc57c0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.240.94.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fcf902-1faf-45e6-97ad-07638aae6e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.202.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82154b96-0204-438c-9dc9-08524bf523c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.251.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a725ec3-3e22-488a-9d76-369ab991703b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.194.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126fa013-1957-4950-8a65-d796f5ee055d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7767235b-3490-4200-aa25-016f1b5749e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.93.164.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dee1cc-b413-4293-89ab-ed5187ef969a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.72.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332f9ece-74af-4099-bd32-d9f2f8589348", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.227.147.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b529a927-084f-43f3-8b2a-862f411d3c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.76.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a51555-bba8-4a3f-ab41-5b6d1471bc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48ee1a0-fc79-49dc-abc1-c3a9db4b3658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73990daf-89ff-45d2-ac66-9d55c91ce0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda11fda-0d55-4300-a9f6-ac765f1a6067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.185.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc67af5b-46a0-40c9-90b2-c829ee8944a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d301a62f-6495-4663-b6c9-d93f32f8132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4a376c-9b4d-4fcd-ad01-e92f912ce413", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.55.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec21dd6-db20-47e9-ada8-b10476c9bfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.117.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e645ffd-4c7c-4265-92fe-3a051ddd2ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c6683f-3ef1-4d1f-9464-26cf8b0ecd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.94.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c77243-788f-41e9-a5a8-367134dd3bb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.250.23.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d2b4be-b90c-47f7-a04f-5db02b8be992", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:fb54:1400::29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa442bb-a03c-4b88-a4aa-08ad4bbdc123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.133.129.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01e54b1-9aa6-4dba-9f8b-f4820d6a8dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.195.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc5e3a4-b102-4f5c-9a88-6e95a6d32f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.17.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2eda613-a162-4de6-af1a-7058a110ba69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.47.26.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a654e1-fb78-4d47-9394-40a63057bd38", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.4.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96724d45-b7cd-47ff-8982-7fa2a63d8072", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.6.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270b5d34-ecea-47e9-8a90-b7744b06ee49", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a02:4780:5e:9e3f::1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac144826-bce4-4179-b0a4-16f4e2923b3f", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:71e9:3e77:1d0f:fd32:e6db']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd07352-ab4d-450e-8c08-f85419e6d8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb29b36-a25b-4a21-a83c-6f309100c69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b1ce4f-22f1-4d74-bd55-1c8728efe2dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.12.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca033ab0-273e-4468-af7b-306d93e52d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6007a7a6-59ee-41d9-886b-a510cb1b764c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4cb804-c1cf-4ed6-92ce-d8277fdcbd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420ce5a7-6bf1-4235-9924-472e9c83e26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.60.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67d195f-e9e1-40a4-93ff-6c5fdf1e4a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.112.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb9e60-c740-4735-97c5-eb054755f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.128.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812991ae-d035-4ed2-8fae-afe8d4c6b0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f3aaf-28e9-456a-ae4f-36773ec26272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d3c89a-e366-4007-950b-ed5a18fa34aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2da32c-e65b-48ba-bd0c-3fd318cb44e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3f6d9f-37f0-495f-af47-bf7c373768c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ffa06a-a3ea-4f2a-93c4-0e321d5b248c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3b3eb2-e56f-4152-8c8c-831213c43fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da82e280-9837-4e04-b9b5-f7f30aa10272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8647ea1-2cb0-4b10-bb1d-75876a3f974c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044c965d-42d1-4bd5-a2c8-dcfb54daa3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91418afc-f1a8-4d66-98d6-e3c24ce68974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c725e417-18e2-4d41-b023-c3472a42c856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c5d608-ad38-44d7-b916-e8b0c89aa067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ef57b1-ed09-4c59-b172-2941bc8bca9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60f40d9-b259-4ee2-a879-bd9696e7c3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8415fedd-35cf-4a6a-80fe-3ab99fd074d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912ed173-d1b8-45c4-9dcb-bb4e4d2ec1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0241a8ab-10af-4c59-b655-255c2fba5607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e94615-acb3-42bb-a3d4-1c2263f97b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79b4d70-7a6a-4648-a06a-32be8c133e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d14af6-d32b-474f-850e-ee79346a4417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503ce2f6-213f-4802-bc94-aaf4460de292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a93857-256d-41b3-86fa-e442855c170b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ca157-e716-4cec-8a62-00e4fd6c8d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8e12a5-2cae-43dc-8737-33c075a48eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07d6e57-cafd-413c-8995-3dca9b51e6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f66b5c-f6ba-4975-a373-58fa97588b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234fdbc7-2125-4d01-ab1d-cb006ce3d845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14433f2-d600-45cd-af63-2f1303a591af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4533727-d5cc-44b6-897f-2c85b4a87e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0870d2c7-94ee-40b9-9e6e-cbccb2ca3acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe36f95f-da29-45c2-b054-9566d1842d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c198ca73-8212-4a22-8a2e-5aaa30cb2a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b75215-0c61-41a5-9121-8d667a74a6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dc8659-c93c-45ad-ada9-3bdced757fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e31035a-7b1d-4153-b526-48d069cf93b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6316211-c6e1-4d98-892c-88a816ab91c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf5bbf3-bbc9-4cd9-a9d6-6e52b703936b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5321151b-c540-45c1-880d-73611aba634f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5ab1b7-9d4c-4867-a67c-bc2c864f4eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5604b288-4177-4bd1-8416-b8405b2e1499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d0ee83-bf9a-4f85-8862-3f782cae607e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.233.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad057e3f-f4b9-4133-89b3-5af022b4f229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.197.59.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6cc527-d253-4240-8b53-015a747f9937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.105.177.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e69fb8-f97d-4753-b62f-bcd8bf927c14", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.77.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d02de3d-0113-46c6-91a2-b23a00595fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.85.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2ffba7-638e-4120-bd1c-d4adeebed091", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.139.191.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9f32e5-0509-4d5b-95db-cce092cd6bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.117.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e546d-2989-4fb9-8b3f-02ec747da8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.63.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ac93db-ce22-4131-a59b-be6e6441c6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.160.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57686e1-10db-4451-b835-559b3de341c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.118.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc3250a-d776-4fd4-9d43-8fa2f6d62a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.47.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf320367-a8a8-4c60-9f5a-d00ed3e3624d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.150.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4a6ab3-8eb2-4e48-9a35-ee82becff9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.159.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dc1bc1-4cfb-496c-bbed-8985760a25c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.246.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e97e5d-6586-4636-a77a-a52a1b5f0c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.253.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc31271-b5a4-4341-b0a8-59c7da44c580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.164.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6889e698-caa5-45ff-826f-e48b9c7f80fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf061b3-5042-4308-9a1f-6e91012063bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e7555b-6e46-4d13-bc7a-edebf756b134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.39.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9527b8c6-5701-4dc4-a999-87c3bdebfbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.59.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf54d27-6def-4575-97f5-19b11caa97f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.188.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a73bf8-2ae2-41c6-8da2-eaf53bc78ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.204.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf722987-1eed-46eb-a8a3-631c3902931a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.44.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85230fe6-9d00-4d52-aca6-fd3fbe6c47f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.51.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384f1a4d-7b7a-4469-a974-3846c687dd7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.59.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a2a437-16c1-4bbb-b1c4-e5249b9e5dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.76.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b492a7e4-08ae-4617-83ca-688ccac15bbf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.92.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425771ee-69d8-498a-8fbf-e718eea51e06", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.113.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e0a5e5-ea2b-4f1d-8320-b19d481a68c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.155.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26d40ff-b465-49f2-87d2-cffc0868fb9c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.220.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c661d5cb-a7ce-4ddc-a52e-352bf6880ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75408ff-bf81-4d20-95c0-724f40165d33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.2.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6983d1-3439-4dae-9bd3-12d7b43dadbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262b6dd9-a800-452d-9f62-0db788596f63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.166.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ee1779-5b78-4b7d-bec2-d13200270210", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.31.88.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f7788b-0821-4861-9372-7ba880c317cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.133.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9ec3ce-0419-4871-8056-c4992e0b5a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.103.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e927564c-bba4-444d-806e-6b6cfe553b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.7.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22b9b79-2e57-4cb5-8df7-b8bb3c19d108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.23.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5495e16c-1621-4659-969a-2bcc41f34102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.183.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9b82c8-f3d6-4085-a618-d3e96b1a5828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.252.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91626e8b-7a37-420e-98d8-b33060b35a40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.142.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028ed05f-33a7-4386-8bfa-0de1aa2afcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.145.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cad0c5-4aa3-45a5-ba73-ec9fe9e9e862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b57b9c4-df64-4dac-ac64-a007e04becfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.99.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50eb106-1f7c-424c-999b-8dd60a6e3b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.67.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfa39de-16f5-45ed-b7c5-f10a18941560", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.237.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb6a446-8eac-4e55-afab-3af25a197ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.107.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152a6f02-1b26-4046-a1ab-bf39836f8170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.4.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09423a5c-0907-444d-95c0-e2319cb7c27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.109.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c50926-fc0b-42b8-96a6-2f9836bfde61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.201.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843c716b-2adf-48bb-a41a-63bc2503b0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.231.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba67f1f-a953-4c63-be33-05e54ad8e7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.71.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f365109f-f1b1-432a-8977-59cf7d35dba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.125.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558d7578-ac1c-4ada-b9a3-a0f076e2aa6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.79.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784d3a6d-1ca2-4462-9cde-1120a6f40e6b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.137.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca36b9a-935b-4418-adc7-00fe6f91ed5c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.140.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828db284-4942-49fa-8f11-1fc5bc453516", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.184.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caab34e6-6334-4004-8064-35f660fa9a33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.232.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3335e7-d505-4f6e-b412-0e70c6071306", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.159.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bb0341-fa0f-4a10-b372-428d211c4fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.221.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9940db-63a4-4bc5-a633-e1158b01886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.234.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a2be26-1c4b-4d1d-8482-cd54563f1b50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.215.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67896a09-1821-4370-aa28-6d5fccd64f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.97.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a5152b-4e17-4d6a-85b8-a541e2fafc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.124.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e747d4-470d-4451-b163-7b01563fea28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e738988-7013-4043-970f-72f287a1bf2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.107.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ff1a02-05b1-4ab3-a66f-b4d6e883adf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.25.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b53cab-a720-4488-bd07-6fae9e50f995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.43.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c2f569-efdb-4194-91a7-8a7c6c30cbf9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.88.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d7cbb3-e055-4e7a-bf87-18623ce25230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.28.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd160358-2f11-40e5-aaa4-410dbe392d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d617722b-19e6-445f-9bba-b6b99bf9c243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dc6bf0-a214-4d8f-b694-c9f766565ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c089e2-2571-4c10-a822-a08463e53b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd361a4-db76-43f7-8b39-9a17866b1d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9bcd50-14ae-4096-bd04-b54837bf7abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5c9996-cb18-4a84-ac40-c7195878f00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcb8988-9a35-439c-9d4b-92715f2a2c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3513d-4d7c-4533-8fc4-6c6ffabff8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85156c29-ec35-4b9b-8c01-6e872fe16e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb4da88-9fc5-4fb1-a56d-894d2724a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0859f9e-5da4-4bce-a722-f284abdf6a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8d4f51-aecd-401d-91d0-392ebfecc733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abf3446-76a9-43e0-a3ef-583a6aa781ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf21a86-2b5f-4a74-9262-3a4fe0facad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2c1656-bad1-43a4-a23e-79e0db3f0f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30000add-0dbd-4f7d-9417-562ad7e95358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144ed5bd-c7f5-44fb-a33d-f69c66b11bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce154833-17bc-44e1-b056-4e06e60f9140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4f4a39-96f9-4fed-ac8d-b2a993ff1d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288724c6-5338-4c02-bc27-72f62a789c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d264231-3d3a-4675-bb02-98da29b748f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb1fdab-892a-4eb1-b453-2e61fa42015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292aeac1-509d-4277-9a77-24f19e555d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9ef4d0-2a25-4330-8a53-2194ffb8d337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2e948b-5c86-4860-9d84-d23682fc421e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c81c82d-1679-4c2e-ae1c-b0269f1b9301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1685fd2-3e0c-4a4f-b938-d72546ba3778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99369003-4c9b-41ea-b355-4d3ae65db047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c34a97-358e-483d-ba91-1ef96e1a2b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7bab26-71ff-4425-8607-755bdc8dcba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f451db-0f79-4dc1-962c-73222f45b2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a6ec0e-c45b-4d0a-9224-95526e65f203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76794718-d2c5-4ed6-942f-666f2ec6402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8099c76d-d39f-4d0d-bc81-4a288076467b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85eb8d4-c623-4093-a8b7-f6aecbd6026b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb5c785-60a6-455e-97cd-eab02696fe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c534c4c2-0b46-4876-8b82-0fc1336a4162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3944aa4b-fb4e-4e1a-918b-8bdd95d4d032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c1dfda-08be-401b-b2dd-36fc3e508c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a4d411-d65b-4fb8-9408-2216dbd9adb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8be673-2f5b-4e3f-8fd6-520c71a3e696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8263cfa-7492-43ba-9f9c-becab93614bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4199e2-6cf7-4fad-9e39-0b6185cf5936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a1ac2e-4c54-4079-901e-22809b6ad4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3484d113-104c-47a4-b513-fa3a231f8dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab217ca7-9f13-4591-bd37-5af3e7424d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035bfc9a-f261-40f8-a581-59f790474425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f539a99d-7aa7-40e0-8504-b6667932ab89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d84eac6-3cdd-42ca-bf71-a7b60b976382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1281ad-32c7-4024-824e-dc80eb889626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896b33f0-97bd-4705-9b8b-584e76fc31c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a74e94-8721-46cc-8321-7c88527bba9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbfd083-86ea-4d35-ac10-41b94eb980b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bee2d39-1d6a-4ea7-ac9a-ee865c8bec91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.60.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac30cd58-eb41-4fcb-91ab-09ff47c90522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5560f8-5ac1-4c4d-84ba-37b4c020fdf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c67451-91b6-4f08-8e0e-50e413a9cecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16a5788-494a-41f7-abdb-6218dda4521b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.195.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397c4055-23e2-4352-80f7-fd251b6ab8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9407ba-58c6-4262-8cae-75dabea3df2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.254.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5839a8-d839-44a6-adbc-f26d66f05988", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.37.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fdced4-a8c6-4b05-be57-73306e8960d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.56.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e275ebf5-c24f-4058-aa42-e448de7b2e30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.230.190.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ca1fbf-e3a9-4e8f-864a-db3b1cc464b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.149.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7eaa70-ca57-44d8-a194-8e8647a5d905", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.211.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f702b16-d093-4217-ab3a-ce8878ffe1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.210.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72db346-ef2e-4a78-8560-b961312a4550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af642b1-5b6f-43c4-9105-fe86773d255c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.230.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66e6a16-d8d4-414c-8d92-8e0b92ba6f2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.242.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1583ba79-f8d8-4a16-a5cf-23079e6d75b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.245.200.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25db6009-1dca-4ff4-9439-60d7a1a60c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.95.148.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6185c5dc-a961-481c-83ce-1810bb138ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.149.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d022257-6ad9-488c-8477-b264565bec79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.48.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb500e25-76b6-4290-bf06-7a84ff11427a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.190.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5280f25c-07db-40af-b706-bf83e1ec149b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.73.64.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c5f446-8484-4c49-91dd-481cd8a03ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.91.81.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499b690a-56c3-401f-a052-1b83a1d5cc03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.249.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f513dc77-2a1b-459e-bc6a-2bad0ba84f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422b2e0a-4475-413a-872a-2487b7d5a4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47141db-f565-467f-a939-66989d6d0c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e0e694-fe23-40e3-993b-a28989358393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc56b78c-354b-4f5b-ab19-16b8ceb02e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beae6f91-cd46-49c7-b3b1-e01180388f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5b6d95-7b72-4e19-bc25-f9b97d3cb0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12386ac9-f63a-4fcc-8428-0c1fc89eabf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6e7e66-20a1-44fe-be6d-583379c8f345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f46983-c7b1-4493-8107-b7d111d1027b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b708089c-0d36-47d5-ae64-b1c12e7dc6d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.53.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13d721d-445a-4f8f-80aa-1d557af96679", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.143.61.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44393f4-a5f5-4591-9daf-5dfac04f3f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.200.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c84b2d8-5327-44b3-85b7-f9d9ed4c65b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.228.64.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8ba1e2-0d84-4e13-8dc3-3966f8d879d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.228.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df04c16-dd8c-4df4-8f68-adcfc6ae04ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.52.154.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3dcfe6-12d7-4806-b1de-6318d9364f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f582c224-a8c6-4a34-92f5-7c9b70b43073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.107.237.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d01e80-5fc0-4dae-b572-c25899f539c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef560ed-e4fc-440c-a9d4-754559482165", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.148.249.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d0a176-7002-4c89-b5d6-069e8212dbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.212.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f51b9a9-bdb0-402c-8794-f680f3c43502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.85.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd1e0e8-f94a-4d7b-928d-ca880a77b979", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.130.240.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f73b1d8-9e5c-4ae0-a034-428a46d9305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.164.146.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935100e2-f2c2-425b-84eb-e528ed743922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d7a413-af60-478c-ae33-3f8dbc580055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e870c4e-9902-4f50-8b93-fdd10a3168cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.206.92.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af11dd35-ae13-4058-b7cc-3df88ad9a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ee5755-9996-4a82-a117-ef735177f5b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.83.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf522ff-ef68-404c-81cf-b1e33cfb2bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c369fbd-23e1-4ebe-9acc-2b75f6265b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84237b6-dacc-445c-9518-c479ee16e4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f6851a-3a70-41fa-b082-697ebd75484a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed8f344-61ff-473e-94c8-fedf01f29056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c801bc-afff-461a-86f3-bd060531dd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ddc187-6c8a-40eb-bd72-bcb82201994b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6409a819-b9aa-491f-aceb-0dd77d9c38a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131d16e1-210d-4f11-9f1e-504c72ef46cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff8eaa5-e8d9-4d3b-90cc-a489583b3cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627a9070-7078-4701-afb3-5b04c2536c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2958f9-d114-448a-a9b4-cb337ac9d4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8238eed2-fea3-455a-97bd-e44504b556b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f3e507-d8d8-47b3-83d0-b160a7b1b096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5322ef-f131-4898-899d-ef399cc5e442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6106d902-9c16-4ee2-ad8c-cc28f3e54265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3303d2e2-a08e-48dd-9a1b-70ba3b0bbed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f4f4cb-2449-4d04-bf94-5267d1a75d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.180.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00aa3113-b301-48fb-aa59-611891fde18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e530c6-b807-45e0-9ec0-3374eb40d4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb6b3d3-92d7-4849-897a-731b89a62b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4110c585-bb4d-4dfd-8ee3-a6696b20a5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1c82a0-9c25-418e-b201-806fd05eee2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.160.2.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0dff45-ecdb-44be-acb5-2f56c37db536", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.65.222.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccb920f-6d6a-4e12-a356-925e71faff34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72b8899-131b-4613-8b87-c788c1986d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a9dd84-bd04-4e61-9f1c-c4618ea4fbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772cfdf5-3264-4ca9-99c4-66657e1fbd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db08203-64ef-4238-b3cd-3620dd162789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.137.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47454a9-e121-43f8-b6c9-9d4c046b980d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588d4ee9-3ce3-441b-883c-7c9a9578f6b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e352a1f-42ce-4d86-bbde-812cb1411efe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b4d2f7-23bc-4094-89e1-b2d56119aca5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43025d43-3ed8-44f7-bc6b-b8865f87c391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b1cd25-4f5a-4d3e-a732-976bd97adba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3318170-34ff-405c-8aca-46b0eb0a2b9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975db12e-ebbd-41f4-93fc-15b5ff3325ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06336f29-dbc4-461b-abc6-66829a2d25a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.234.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2aba86-c19d-4200-b873-2c4333e4404f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.106.193.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809622b9-3d61-427d-8d3d-e473e58dd51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.113.0.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6265843d-6bfb-4f1e-84e1-b7dab015fafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.142.250.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572e5a1f-61a0-409a-9bb3-22bf57a4adc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.177.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d69823-e399-4db4-a299-fcc4f4b87de7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.178.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e49cd4b-b75c-499b-b68e-000aa738afd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.91.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6befc1-784a-4553-b5c8-e26662f10cdf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.110.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18eb1d78-4a39-43be-a942-f4994414a5ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7062105-5bb9-49b5-b041-a4755ec36132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.121.161.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7364eb76-ffd9-476d-92c9-d2cde4bc4ecb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.200.78.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b291f5a0-37f8-460e-8576-d62fedc56d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.203.68.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08579d2c-9c93-4428-97a8-3e21a8c35dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.53.58.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1816bb-c789-40e8-8f30-909f14dd933a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.89.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bab8ac-e21f-4aa0-85e6-290598e7aa0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0700dde2-4da9-4fce-a2c2-ec325203338f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.111.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b3ec58-f645-4485-af15-7bb80acee89a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.150.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebf5ded-0534-451e-9fd3-89432e69c1bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.16.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e54c2e8-f274-462c-b8f7-763bdd58ad96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.71.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f253083-1454-4802-b30c-9e1dd346cccc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.243.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f058ce-2111-43bf-b054-ca415be33ce8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.187.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac67e0f1-7945-4051-9f6b-39eb61602e6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.220.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c180be4-fab0-4980-8bce-7f8d059bdaf7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.254.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2578381-04a2-4b92-aa8b-08ff722b931a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.129.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa295ca-ceea-4611-a818-65f97b48fe94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.187.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963c7231-637b-4d35-a23a-9b498e1fe045", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.167.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec66e412-ecd5-4614-b153-619577c24392", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.68.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ae7d73-caed-4bc5-93d5-19f3476e2bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.135.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483f75a0-29dc-4f91-9094-cdd807daab3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.152.72.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb428266-7ea4-4ea7-b348-1714e1b225ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.114.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1566b18c-b3a7-49f3-929f-e5ba2aa15866", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291dd775-75a5-4b1b-aa06-6ab9d82b349b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d3c9e-0b1b-4b75-84d3-3c1fce211c23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1a5fc4-fa75-490e-b533-ecc6dd8f3d2e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.191.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8c17f9-30f9-4e25-8cbf-8bd1ebe75db3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.138.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875c537a-55e7-4711-baf5-35045950a65e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a808a615-e1cd-4288-b7ef-10c9489e1494", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.95.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c36013a-f22a-48f8-b852-99b462725e1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8010b3-4600-417e-acd7-ba8354e7b562", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.174.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ed9c45-394d-4033-824a-43562dd1246d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f29c53f-d751-4f01-b0f1-32006809493d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb8f8a7-2012-41da-812c-1491bb230d86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.142.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b294e2-6028-4605-9143-c6a7480d1da0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.241.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3252c7-c4d3-4621-9042-5d6153db96fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d0a387-81d9-4ff6-9b8d-5e52f15a4956", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75faab4d-b740-404d-9d0d-f3b9b8a7a903", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfb67d0-bcb8-4057-9686-9fedd3dfc39f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18614216-4348-48eb-9279-c10772b0cf38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5726244-260a-4770-bd72-5d6b647f1f6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bbaaed-cce7-4c11-9633-387feb64f277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c845b9-3160-4ee5-9627-d66d046a02e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c190f39-ef65-49a8-a0d5-f77760eae3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41ec315-9792-452b-b32e-514bd016e8b7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.242.226.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc944fc8-4930-476c-8b7d-44ac403446c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.243.142.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3a7e15-6d20-4fd7-aba7-0085ed1105de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.245.249.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ff8c27-e7f6-4cf4-a9de-680918112fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.160.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a175c0b-e10a-4b79-9cf9-86ad399a65f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb7746d-3754-4ab2-92d0-3c66e4b516d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.195.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa98afc5-a13f-49ce-afe5-37399e319d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.198.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0fc8db-20f6-4024-9b37-f24ff6255c9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.195.188.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bda890-976b-4a8a-ba06-c11b63a2f72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.193.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d612500-b02f-439d-b630-0583c7974ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.18.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a308a218-a627-451a-8e5e-e9a7046e0ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46675da0-1823-4108-8ec8-00aff6fc050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef18a737-d54f-40c4-9da9-45df60fb7ccf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.216.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319e4000-130a-466e-92fa-aa61d07d76e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.127.5.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea8ca57-8e45-4cf6-aec0-46a9ebd3d2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.128.199.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d61f895-0ceb-49c2-9a31-50af42fd1cd4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114143da-d3c7-4920-9aae-35d392ccbb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.155.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75da2650-0d5b-439c-81b0-c426e599d107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b925afe-f14f-45bd-b4c8-9e02b5d1f0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87057d71-9f6e-4cbb-8291-3192ab437f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0253b454-64d1-4060-b12f-e1717bfeea06", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.172.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bef0c7-bc15-4d99-ae7c-0c802987bfdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.193.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eae3ebf-c0c3-4090-8eea-8bcc034d84d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb96a9f2-e56f-481d-8dde-bae01b2fd1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2321847e-a829-4c92-8099-5579dd856ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e7e185-a1a0-4a06-b8c5-3975cfd48e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181f2c8d-e6da-4fd9-bf3b-905cba0e553c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84035816-1be8-4f01-b5cb-d71267fc424d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aebb6a-b78e-4121-b3b7-15ca05d7ef8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85330647-9a56-4605-b6f5-cdb8703a4692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee570299-a7c9-4eb9-8286-9f5fa775fef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546f7e4-2e46-4e8f-aef5-99f42b1af4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49711909-f7b8-458e-82a6-082c768f0fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa854f44-225a-491f-ad56-8a55ecccc39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5649257-a4ac-47b7-9cf1-53803e9285ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ba8cd3-e98e-4758-a1f4-850bcc448e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f8bd4-22c2-4820-bdb0-3bbff8daaf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c6352f-936f-4fb3-822b-70698db27b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9149a8d7-d1c3-417e-abad-dc00d2029105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1af5da9-47a6-43f7-8532-f9c8b71ee11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee990f4-15a0-4760-88c7-1389e3952448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b56cb2-ac19-43cf-84a4-794adb372478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc39188-bb6d-45a3-9dd1-02800aaefa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb88795-657f-49c1-90ee-8a7636b0cd59", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.249.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2917f0b6-a959-4fca-8dc8-1ed42d4e5139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d2a180-796e-4cbf-bbc5-5ba8a8e82d35", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657564a7-a4aa-403c-bc18-65cab030c873", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9962def-534f-4e4c-a77d-f661900b93eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083e02a7-107b-4532-b25f-d43fde0957fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04471b55-e2c3-4956-8f34-46d67c2cff4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd53545-c2a0-4e82-8b63-b2d5a6d80f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6593176-72e6-4213-9186-6ae545f9ccd0", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54a258b-4291-4a40-af98-d2b5665ddaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac384196-f08f-4ade-9f1e-3ca6fc6b9a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1c2154-0300-4c26-ac54-0828a9c91ac0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.77.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86a6252-4f96-4758-8fb6-cb9993330e59", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.123.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfd1e1c-b503-45ce-a5bf-bdd3b582e637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e39ee70-523a-49c2-ac97-78a9762ec0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92beebb0-3a47-4be2-9b64-a19766744c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733162b7-1776-4829-bddc-5eca30355904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2ffd6e-debd-4882-9f66-8d57a5d55675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350a339f-7e11-4bb4-be02-df40249556d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a6f7fa-38b8-4479-bccc-de0ea32b783e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b46832-541c-4d6d-bc13-ff63274c2940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d26223f-575c-4faa-b6ee-5aef9988aaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122d130a-428f-4a46-913c-3e61e7645dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d451ba-4630-4230-a9bb-82241b2b7383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5fa9bf-b861-4155-8c1d-550ba97d9f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cce84c0-3557-480b-bdc8-700cbba60a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f26dfc-723f-45de-89a7-93190f062618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6772c5c7-6c0b-4fb9-898c-9ef373fc4c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32abf4c0-b1cf-4e3c-990b-4e798336c26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9405ded8-beff-4d78-b3da-7b41a7a853cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4d35d4-6007-4719-998a-c5f650107ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28301fb3-d6e8-442e-a736-50c63b1abf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb186a9-3baa-4211-98fa-3d2b0ddcbc74", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.237.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44a4c8-3707-4420-81f9-26a8a6c79aad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.162.8.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e82a04a-4ba6-43cb-9b0c-a6207609a722", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.173.103.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab17ca76-c206-4719-b020-fcc3b4676495", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.162.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c915d9b-0253-4bb1-ad18-d07df8c17bbb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.180.107.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902df9c7-c87e-4038-b9c5-7c55039f3035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a5c7ca-ef3e-4ba6-b262-11b7a678c4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918de84c-e94a-4896-b230-5fdf26796921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a134ad21-8d4e-41a1-be2a-10eaae0821ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056e23e5-72f0-468b-b574-bc8835328cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7eff9c-a7ed-461a-8a30-8781ce133b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88006884-ea1c-4318-bd91-49a5aa86b3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51777b00-f100-4ef8-80e4-64433ed14df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385d86be-dee3-4f4e-834c-32ab0d010c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a621133-aa3c-4cbb-bb4a-03de13ba1979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5fc29e-95a9-48b6-9f05-f35089db4520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ef8644-9877-4476-9440-020c3ce181b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0832ea8c-a9f0-49ae-80e7-35bed9148999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243785b9-6cb9-425f-b1ea-08cd7795a135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3bd39a-154a-4240-bf40-3b3b836cd722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c33c62-bd32-4237-8974-6cff0e18b734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a679f04-df60-4281-be9a-1b446ff3f3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8474634f-6b93-4718-993c-e72eb495e8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0cd715-e802-4a6d-9af0-128f09bea3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2565fd84-446a-4961-b98d-bca71a1a84e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a255872-1a9c-4b60-b4cf-b16c3e07785d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7158e38-87fa-4a13-8f5e-feb46eb5e3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8afe7a-8cdb-4e86-b44a-671029cbc72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beb202a-6f35-415b-9023-6122c0da2743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413c3a70-fb69-4965-9e56-d737ac195a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3820d765-3c63-42ff-8c22-43702a42fcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1320c5-6aef-4bff-bfdd-4c9fb92b77b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7212b29a-ff87-4411-b0d3-638c5076aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6f33b-d1f9-4376-855d-7c5ec4c5200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e803f56-459d-4926-b062-f5cfbac9fbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def783b7-ec6d-4121-ba24-4cc51b9adf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf854abc-5ff8-4a0a-928f-3ff9649fb1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a1ef74-5f63-47c7-8cf1-8c28b3339fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dc9477-261a-4206-8b4d-5e9f012c0c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166ee7af-b8fa-43a0-9fb6-99b2b51de23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac35058-de69-4ef8-a896-bd782d0bd5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc531b6-a2be-467c-96fd-b3b0feb1e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a77dc1d-6e73-453f-a3bc-9fa90364d58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff50fbc6-48a2-49dc-a0a7-d3692a98f0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d9c724-14ac-4a0d-9978-a6187f6dc353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d45d2b-53ae-485e-b768-6fc7dfd3ac79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.138.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b633a1-3ec1-4622-b0e9-bd30e562b32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3136d7df-8fe5-4275-803a-8f9d7562675d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5ff385-d8bb-4945-a750-7ce3bad14f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.105.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dfd2e9-41c2-4bc2-be9f-fc59af858ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0c5e3e-80fa-4d99-b115-33cc638d811d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c74b1c4-1793-460b-b705-1209a6d341f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78ad819-82ee-4d19-acfe-82184251d2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6215fd54-73ac-4d9f-a844-e3435201831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c85894-4aae-4ecf-80d7-24e46b18eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b648b4-2a17-45b6-bffc-b61c6ca4f299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.153.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca5f71b-77ca-43d5-b6c7-263d23da72f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9df2eb-a30a-4e1d-af06-be3564bc9646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2f2af6-4e80-43f5-9a3f-0b129b251179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce47f2cc-127f-46c0-bf1a-97eb8a0aa6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2581ae56-2434-4f86-a8c8-655d048057ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b8b3c-48cf-4a04-aa55-1d4f2f91b9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c568ed-06f0-447f-8677-2ac4c83b1245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6b7a08-5561-4510-a0b4-9c58eaee860c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.134.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417bb7ed-b2b7-4fbc-91a3-8525073e0d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e756a-e4b2-45ac-bf51-13840f80ff3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.149.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b5bdf6-bfd4-4b98-bde4-ac7f82424693", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.35.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0367d84-ae22-4bf4-9d17-041d3bd4cf75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.52.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08afe09-5b56-4e0b-bb2e-bf520c872c9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.198.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0659a82c-da55-40a8-8420-d16f5baea7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1611fc56-b276-43f6-9021-863e000b1173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e84b6d5-0234-4cdb-95cc-323c35c58fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1318464-870b-411c-a4c5-f598be68cdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419bc7b6-4e7b-423a-91a1-1f915a8eb0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ed332c-bbc9-4956-8c89-9fdcfe3f0478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba375281-39a0-414c-ac31-3187e0ecd586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a7dcbc-f0e3-4c5f-861c-0570befe3513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f3d301-07a5-421b-9900-e01083f3cc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d67cc4-f154-4d74-9ddc-ef4770cd98f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2451c015-3b92-41ef-8075-2ba5c102ff69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94358b7f-f362-42ad-9881-b37cfca5caf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e25ddc9-9c9d-473c-a4a4-776d4bfa8a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fbe835-3172-43e7-8254-404e016c8efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f452a5b-e3d0-4ad6-a10b-6f339e2a2454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1386754d-8433-4092-a5c5-d5467a181ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b28fe11-f389-409d-b35d-92579a6b38c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852c38cf-08af-40d3-bf61-7fd12797c30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4572e24-5219-41c7-a092-69fce435984e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e9618-8480-4779-813d-8541b804db43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab48c60-e91b-4f1f-b568-c45d29ee7ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930fbb9a-fb9f-47a2-b36b-5522f5970564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a522f9a-137f-47c5-b164-917380e286d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935f20d6-c6d9-4af9-a346-bb43c83ff99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c732244-5365-44df-99d3-2765d799f8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81d0820-2b68-4cc0-87c3-d5b8335b202b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34db55c1-e718-4d6a-b310-3d543f627f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1c8880-ee7d-4ad9-98b7-2cd7e88a3016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5cfad1-c6d6-427a-b655-4c60096247ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8846ec82-d3fb-4406-9974-0ec436271671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae34acf-01dd-4b35-acfb-06164b3e9f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c4b7a3-1f17-43e7-a4a9-f996dfbefc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc1c96a-53f8-4c54-aceb-cbaba10cfc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cb0ada-4d3c-4327-8cd6-1508e2dd986c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb734f2d-4e25-4224-9464-abb2c43d67c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6623a8-962a-4621-b103-c0d23f4c3e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2d4f10-88b0-4f91-a55a-36ce2c9f2eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00da898-3aa0-4e63-ad5f-d09ee1161879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224966a3-e452-4bbc-b4a0-34d1137279db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fc1e5b-e839-4803-a42c-6df4bf11e6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1660fe2-eb29-4f30-b134-73640127b0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b419ca6-185f-4a6f-a61e-c03a15266f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc605ee-7551-4530-88cd-224d0418d470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe48850f-9f3d-43a3-835f-190a90d5694a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502003d1-87c8-4f2c-97ea-79cb05288add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80eea36-8b3a-40aa-9b21-2c90543fef45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a945d60-c9d3-4716-89f3-41b9553de859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df8ad7e-5fd7-4565-9d65-40daab2206d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28faa4f8-af98-434f-b182-c364a0674e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012cb79d-e2db-4c2e-bed8-1510f358d5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18c5114-af35-4541-9db2-3a0a0d25ea65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fe41a0-38a3-4057-baa0-f724af3c1074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44395af6-c04d-4efe-a954-5eff251b0db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a3b577-f6b2-4940-aabf-44149be3c3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99343977-9cd1-48c7-b40e-777f5ba6989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650a8e5d-b35d-49c4-9675-727973ccc143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.200.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5755a211-e195-476e-a0b1-28f7448c0fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.186.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3562140-eb0f-44b7-a504-fdd7c178e25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9264ddc2-226a-481f-893d-48863c6195d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.105.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf0a49-8f1d-4b4b-b4f8-6fe501c59325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8e5c1a-e00e-4dc4-a545-e0115531cb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d909d43b-26b8-40e7-94c4-151cb4611fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab418ae-c68c-4f5b-b385-3dff98166052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.39.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc819a47-a5fd-45f6-9122-7f3a2f6befd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f11620-6f3a-464e-8f32-510f6db33731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b543cced-b9b0-4043-b89b-16aa406b739a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df2e5db-8a2d-43b9-af2c-a5237991aa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.152.6.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c228b72e-5bde-446a-af24-d702d57448d3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.202.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ba9549-71de-42af-8179-ba804bc1dda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.173.209.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bcb420-d058-4921-b307-11f36731a708", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.29.238.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08eb4b7-13aa-4e2e-a88a-dfadd14b37a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.36.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602b5a96-28a6-43a7-8ab4-4db6c17d8638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.79.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4d10cc-303d-4312-985b-72a323ec41f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025eb7ff-4711-458d-8bf7-f947ea47e935", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580362ca-4f01-4349-9203-1f4c4eacfd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.201.173.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb5d082-6fb1-4677-b8ba-303a01fdad33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.159.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2615a7a8-b967-4a93-8d50-c147bea571f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.22.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecf6285-c70e-4961-98e3-4aed02954076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683dcadd-6000-4ccf-9bdc-54733ea71362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ba6591-597c-4a9c-a0e7-c4d3fbe51a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.195.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d08882-8e5c-4d68-84dc-0ace68db7f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b250ac-ca16-4afc-b9d3-7c57a171e02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.210.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710529c7-9d2a-4433-8869-1845a23a3652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b28442c-2626-46ce-b7ce-346d5ee4bf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.221.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32489db-4947-4dd4-8322-2cf364f03cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.5.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b57474f-ab2b-47cd-877f-5d146c27089d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.189.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1859391-16bf-45ed-b3d5-65cb50196dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.210.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563459eb-056d-48cf-81f4-fa35e9803b04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.216.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d97e8de-9a1a-485d-a11a-c8d565601eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3dd703-1048-4dcb-81b3-7fb9c0e91457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f282b-e2fd-4717-8d63-e6f3d908b5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d33929-7966-4fb6-90ad-13f38e5ab974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a5bda1-3a7e-45c6-8072-ed85c39ba357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e3efb3-6465-4611-ad9d-73cf57156f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cdf851-3b78-428a-98e0-d22c46959bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9569fa-21f1-4832-bb93-1a7761ee6d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f51c50-f7d2-44d6-a07f-9a74c9c88506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33facbe-fe5a-4615-9c75-2fa8bd859f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7b0f1a-0b97-4542-a8e7-3fdb55ab737d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755d9916-4eb8-434e-b4e4-5ef677ced619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbf533e-04a8-4cb9-af10-6e9865287120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8693578f-95d5-4b0c-981f-d9bc8cd366a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.63.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e05c044-5e63-457c-ade0-387ecb4c9f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7ebb51-9b76-45c6-8bc2-8357d0172bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7661477-cf57-4bcd-aa8a-5b92d0da564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9805c7cb-e887-4b4a-8988-5ebeaa88f276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc32eb-8bfd-45c3-9d23-f867ff07f4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aa5eeb-583e-4c9d-b84d-99154ae222ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91f157d-ba5c-46a9-b9ba-c415c25ef28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3beaba-ab05-4a85-bdd8-b980bc7fc477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55217bcd-6236-4636-bb10-a91a7e1e7fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c731038f-3b8b-4470-b996-9ff5f94e1dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.137.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e15733-ac4c-46e4-8efd-4804000b40a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7f17c1-27a6-4ac4-82d0-d14cdfe48f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86884fbb-ba88-4880-94c6-2a4e7efd9a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d094f61-4128-4950-8be5-7cce66c2bd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.164.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d891a72e-a920-49a7-b095-d251d4f13d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a03e6a9-9f1a-42a6-bebb-4b437da9d3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3eb4738-e769-4fc6-9f41-ee9e7fbb465a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66781af0-5cd1-4802-8b2f-e17c0dbecb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1efdaf-3eab-4d7a-ab87-8e10480f7bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4769f6d-b99c-4676-8ffe-42c3af8983ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c121943-fd52-4a91-8771-5017d0857360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f97851f-f472-4f38-b6a3-5e6a0da566de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b6cfb4-a8e3-4cd7-aa86-d066d42f6c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be39f83-4310-401e-a2ff-978ef790a00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b664bb52-926c-4d46-b90b-3d3dd3ea44ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c34fcc-5936-47ed-80cb-4525dcc33d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb8d891-f030-4987-b908-1868b795d112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e40635b-e531-4695-b73c-60ceb807b1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e3195f-15fb-435c-9a54-27614ce84232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa158eb2-52dc-4b21-8f00-40beb1d8e1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905d8bd8-e803-4c4d-9400-33c84813e18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04abec27-330f-422d-8e41-c52b00faf5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.107.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9beb347a-7220-41fe-ae56-b7e36a12979b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b9c4a8-d535-4b52-a6be-2ed3ea4afd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a70014-a644-44b0-8502-8eb410eaccf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e2d9fc-0c05-4d54-9519-db6809038e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb3f0c0-8863-4141-a4c6-55f951847ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.163.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e5ccb-92f5-49c2-ace0-4cd49e4b11a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763968e9-71a3-42f8-a5ab-1c75306e1fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb28a719-1891-48ba-80f7-5fc3b0e556b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.186.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759bac42-0a1a-4637-b260-7d4267ee5ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e55ece-73eb-4091-a548-b6d5bf8823d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef01dac6-95b2-4c38-a7bf-10e4795fbc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4f4e38-c075-4f86-aebe-03fdafdf2388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.25.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb69fa4d-b027-45cb-948e-7220f7af03f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f932d5-3770-4764-9c5a-c766040c0954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8974209d-123a-48a6-a88c-03f47e355544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a50d759-a263-48e1-93e0-a53582461fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f31af8-e956-4ac2-a223-d560323eaa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc37199-2d0a-4f4a-8f5f-13dad48b777c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5beba203-4296-485f-88b5-0b6879ecce60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0251da73-bfd2-41d8-8f07-1486e8fb3515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7235c87f-360f-4a8c-9ed6-c9b42d2cec10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a46064-57bf-4b20-ba09-041f898061ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f1c58a-64a8-43c1-8116-744d1bad7971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f2ecf1-ddd1-470b-a430-182fbafc1cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e4e97d-608b-4f4e-a500-652124ca3232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08398d82-3321-4879-ac5f-473d7c55aa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9763cd24-1e06-4435-8f82-35d20b62c68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f60fe4e-98f2-45b6-a01a-b4842a089a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc95624-75f2-4875-adf5-99c0fc0a8721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cddb66a-abfa-439f-b14d-c428479ca6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ced3ee-a0d3-49c2-9e7e-626084856872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e94ed70-5dbd-4949-82b2-c22e6cbd58dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c282671-215b-43db-b548-1786e4a3ca8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cf42bd-cd84-4d00-81b9-0734f3c73fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bca1df6-7dd8-443f-a447-6fdf01da6cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f809b0-557f-444b-a6d3-8366d2894d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8002ff01-f87c-4266-95e5-14d7e7d20d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b69950-06cf-478d-8da7-6764dae3372f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba025bf2-d254-4b21-b15e-8d98dcf075ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6f599e-d793-44d7-be52-76d23b1e9e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d2d58d-795a-4dd1-92c0-2820373ad147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeee0a1b-4bb2-4cac-8c06-0d57c1ae2383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c022ba27-fc00-4954-9708-bce0aa577e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0aeb549-d5ce-4de9-a2a9-bef9bd8be3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9722a463-9bf2-4c70-9d87-5ad30f26094a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4748a21-b591-481b-b238-1ce2dfa91cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d137f7-02a1-458b-a899-44512018971f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3f5bd2-22d2-4209-ba5b-41d4102d5c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432333eb-bc15-4c20-a232-2494afb7f18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0403432c-8e81-4d70-a65b-518328b6d1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.64.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae34446d-dba3-49ab-92c2-bb9ea24e71b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65750ee4-e554-4874-9f75-0cd39451ffaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c380bd09-5010-450e-a1be-e634be5ff1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5feded-5195-4248-8afd-09c7b002089a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.40.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b0bbe0-8e7f-400f-ae0d-570e11464cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3091212f-a93c-4e8a-8036-0e239fbfb7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.63.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c19b0b-fcc0-4fa7-b649-839a31930aa7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.176.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75587d7-ac5b-43dd-bd6e-4224d45a596a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.211.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c147ba00-0aa9-4628-b252-500a0b0f3c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.213.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec8292f-ad26-43e7-860e-897729c7bf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a47386-052a-475a-a431-0b71398086f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fdb0ee-5bec-40d7-8bb6-a283efe07b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b172fa25-07e1-4892-889b-93e356a90406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d5f6d2-38b8-4f09-8552-95eddf396ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e02b961-fbb0-4aac-8276-b7914c9009ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6b8a7a-0a75-4887-850c-2211970f84fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f060bf-e069-4392-ad93-d3767be8d727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6325bece-1780-44e1-a4aa-3355355a486e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.81.14.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9addff5e-dec4-4ffd-a602-848d855b6c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549e1955-1b95-4157-8dc7-57fad714029c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64db864f-427d-42b4-aae9-e31ad4d5c77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b10ea81-6ca6-4551-8c27-d339d631f2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7af5ff1-e4ab-489f-80cf-f7d4d6b71d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0ae94c-3066-429f-859d-9b454d5a5436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c15d99-1e31-4fcb-92d2-2093090b67f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183c4700-476d-49a8-9e05-3263306e67ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979c35f7-c95c-4028-98d6-2d582c683912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04d55d3-5ca1-4c39-8e83-b21ce965c01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.128.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332aa089-0c20-4b1c-aa4b-3c13f93c8201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9f2c80-d6eb-4a3f-865f-2fd260a55773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa709fb-d9ad-4905-aa59-73b1b5a4cd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fbf004-76b9-49e2-8ce1-4cdaf89f6e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58da1eb5-b3f4-42ad-928b-921e88815a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40996a1-a1fb-481f-bbd3-6e50c7c2c182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b42654f-83bd-4d6f-9db1-1cde1565ec1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34136bb3-3cd0-4dbb-8c4c-722862af63c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c2a508-4609-4b6f-a5bc-a63e5d1e3177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafa5286-ccce-441d-a802-1ef87905a4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49406036-c060-4937-8499-086571ea0f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a86b5-01e3-42e1-8592-d71da3601be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b394132-f970-4574-853e-6b2b9266075b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175cef26-9868-43fa-98d4-b71a1e970e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.180.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6bbb1d-f743-44ee-8818-ea3ed4869b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f84fec5-135a-46aa-b330-c20d4ebf3d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e7fdad-4d19-4e99-a26c-9717bcf08ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb902ab2-e9a2-42a3-b46f-d887264ee1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36faa058-e552-44e8-8e58-33fe46a3f301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d49143b-bec5-4cc0-9137-5bc1f4e25667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8aa3ac-2721-4972-9e31-c3d24d7c49f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bdac42-c7cf-49d2-946b-ea00e9fc9c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a43d067-7c14-4e90-b941-653afd55da79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.225.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3b58cb-3245-4f93-83e0-0e2cf6d9c9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4c8712-ea37-4eb0-86a1-7cb8f7c8ee9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3846aed-9a47-4951-a6a6-d7798eb800d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f505ae75-641c-42ea-ac01-c8363ff52b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc4ae0-505f-4aad-8476-187bce7fc586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.8.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3616db-bdda-4eef-b90a-8b227d2ec098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9b5729-ec32-4d03-8876-4fb4d2852cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e94898-82d3-4492-8768-7f3c968dce05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f99263-1ad8-47c3-9d00-223419563bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa607b1-0d55-4564-8fc5-062387018932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209728f7-0c54-4437-842b-60ab21038a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.166.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0999c5-6f5d-4f5a-8382-4728bcb3b1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.211.212.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c593f1-435f-4c90-8d75-be7a0b3e881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e86c746-3b3b-48e4-be29-39f760a71bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9843dad3-3407-4c17-8748-c0eccd5a78e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dad2a4-515d-4b25-bf26-36b9a807dc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a2b031-45e7-4afc-87d7-d78b0d91942d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.87.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee204df-074f-42a1-8c9c-84b8b7c1bfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.222.11.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5eda4d6-d2f7-4dc5-b8b5-a80241442ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.158.204.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608ad992-70f9-4384-9313-85f2f84b6969", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.243.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe183854-106d-43eb-b3cf-140107508c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.235.121.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af38f9a9-a7f4-40fa-a07e-4558762a168f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.85.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca6f68f-8bea-4da6-bf3c-56259b39321a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.64.85.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0e805e-2918-4828-bd74-324c9aca7adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.232.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eca20ea-7fc6-44cf-b41b-88332bd18b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c589a09-e396-4583-996a-c98d145bf0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.127.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036db63-967e-444b-9429-6728a996d454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696b2148-5ffe-4302-b4e5-1b747f208eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc76dd6d-f7d3-475f-9d8b-9d7f880263f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61337342-3759-4bcf-9962-3daf4a778f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc66eb8-134a-49b7-a2a7-b07b7b5db904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ffae65-af32-4f08-b1bb-ad1790fffd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc9046-0e55-4454-8c4b-69c5f708e18c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.150.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3763f2-26cb-4bf4-905f-fb69f5496b26", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.178.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da22d0-2249-44fe-8b48-8c891de2fe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.195.226.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf4f026-c631-4fbd-bda0-162444c58f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcd05d8-a19c-4fd7-af37-2859e1f04416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c390d0-4ccb-4f4a-afe1-2659f2c4ce69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a319361-cd92-4fba-be67-c6c173faca60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76da208-7fd9-41f8-b540-5282d007d7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf8aa3-e2df-4303-8a68-c84f9d649b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa58e75-9eb5-4e6a-bea8-b7906e62676b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c71325a-96c4-4847-aa12-595996c7801d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b450f4e-3daf-4223-9cbf-310d5157e028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3b3d3f-7aaf-47ea-b3d3-f4804ae79017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f0039-bcc2-47e5-a472-f33aa43ca824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51df39d4-f36c-46fa-8eec-372b022812eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b084dd6-3e21-410a-9948-974bf9b67107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22dcd83f-5d2b-4d69-bc07-c30b55ca62c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d033b3-8e2f-4acc-ae9d-632447ec06d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801c147e-5de7-4e86-8683-01e9d4fdd8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b886d95-f406-456a-a6a6-0c79bc6e06fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82671ec0-db37-4630-ab1e-f9521f0c7640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a3a0b8-ee88-4c85-afe0-f5a6314de64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8582594-589a-450e-8eec-c377be5a54ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f2d58c-45e0-44f6-9ed2-3b949a4fbad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf679104-43d7-48e8-9f18-25ddbdd8ca2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15da2b0-0bcf-4b0e-ae22-16fd40c6f255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29588fc5-7805-4347-ab88-0992d649d341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6939a0d9-f257-4707-8d46-af65b3d89fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7ac958-4fbb-46cb-9e3a-3d98ce0757e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce4ff5f-a01a-4e96-920f-bb16eb17bb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea4efb6-2545-4d82-b9ad-223504be145b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0986568-524c-4ac7-9396-5b6a3bf9b4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609d1fff-978c-44e9-8d6c-93200415dbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfa6c4d-df8f-40d1-9953-a921a82c0e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be916af9-6d36-46c0-9c1d-950f66d13ae2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.154.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea0b831-448e-4155-a824-6b978e1ba024", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.35.47.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e86e9ed-1517-4f83-a2a0-9693ecb84120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c69f495-4f7d-4362-953f-0fc171389285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eccddc6-a163-4605-a249-d45fd08488a9", "relationship_type": "indicates", "source_ref": "indicator--6c69f495-4f7d-4362-953f-0fc171389285", "target_ref": "vulnerability--0c30c94c-c832-40c6-8ff6-5ed951dd5fa2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d1a311-f846-4d16-b93f-1698095e41ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.128.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc331a31-55f9-4ab7-a2c2-fe61190e2fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa70c03-f8d1-4f48-925a-b883dff02ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e66c01-2070-4f6d-95da-65a3b97143c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c39fe7-d9b0-450e-811e-2b920dce5065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6a5d33-4d39-49fa-9700-9561dc7306a2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.224.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882deb9e-7379-4ed6-9505-35ffb86dbc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15a5e94-ae80-4078-b49b-2c21cfef335e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.176.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3987858-7b3e-4346-b4d7-70a3fca8e480", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.84.211.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41589d69-bc1f-419d-9236-6ea775053ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a043015-82b6-4ce6-baeb-9aa9ea21b54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38104e95-b052-4eec-b894-da3b681e33a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7530bfd-a171-455d-b7c5-3971904a1da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.108.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a634caa-3d4b-44cf-878e-54faf5b00951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e099542-bd12-4bba-889e-0da02eec10b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451af9a8-5675-4338-94fd-1c72fc2a966c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.244.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1b15e0-3e10-41f7-95fc-51f469525cd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.12.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe084f65-feac-4829-b13c-08d2790ab86e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9fa65a-c984-4688-97bf-e12066222e2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.226.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b0a14f-1d92-4ea1-8264-7077340447b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14d7311-54d9-4201-91d8-59852231bb53", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.157.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0c9663-8bd1-42ce-aa1f-d0ac4a036427", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.0.245.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88230aac-80d1-4c1a-b709-5382d9758bef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.129.44.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf35ab6-7059-4684-a11c-0f01ef005352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8ca210-5485-42be-90a4-fb923bb4a274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.9.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e966f0-25d1-49b6-89c6-f7d367480049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a579e3ad-7c62-45e5-bd76-30e103594a58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4198f39f-a4db-4b2a-bdbb-d5a2c1f2b1df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b44d9e1-01c4-4e50-b7fd-c7f41970dc87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f050938a-ef46-4df1-bbe4-5b825d7e2918", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095a3a4d-9241-42cc-b9a2-d9cc10b52f90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde1cf8b-110e-4dd0-9b2b-122e5e80b97d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c38fa5-d3ce-457e-a3a8-39761134496f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1d05ad-9f85-4abe-a756-880b74fd8641", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5028b9-3b0e-4892-9595-cfb3d95e6f9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d73dce-7161-4f57-b131-a70e1c20d487", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447cf199-eca4-41e7-8d98-9cc996e8b778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337db618-55c0-482a-9e7d-9aca75875ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c08968d-4fe1-48bf-9c7e-a54b6bebeddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94487ebb-85da-4426-a9c1-9666bfc95b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9af8d7-dff9-42de-952f-ff66f2b955e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afe1fbf-7733-4f6a-9eec-8df5afc6394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d580ed8f-a365-4645-8bf3-29cd288c3871", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.62.118.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f10dc4-ce6b-40a2-b039-3cee9f2fb0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.125.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771fa962-e840-40dc-8fcd-106947a0966d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.193.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bbda84-f2e8-4d0d-8972-b5fa9a9814ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.83.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd119dc-6d09-42a2-88a1-91b085e9fc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.49.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfc5b3f-c3f0-4caf-92fe-9292621387be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17eeb1d-21b5-4fa5-a0fc-e7e7ac84c11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.235.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698b004a-e76b-42eb-bc8d-cbb6a769a10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.189.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167c76c2-cdd3-4392-9a7b-5bda469c7ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.39.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4bd19d-b4de-499e-838c-78e1e6bf77b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.58.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa146ed-9d92-469c-bacf-03ea9ac94b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.189.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9bc33e-e974-4398-b41b-9d84c0522024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.197.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df84dd5-4113-42f3-afd1-1f02ca306299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.188.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cee534-afcd-42d3-aea9-df6cddde90dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.198.191.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea7408b-9ab1-420d-bc5e-fe07a21a1ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.5.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5c66aa-2679-42e4-b909-f1868acc0a2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.147.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb5a073-03e8-4225-8015-a0287bc2f558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.83.105.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beca1618-26e5-4ebf-99b6-84aab5103400", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a957d810-c311-493b-b18f-0a074467c347", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658306ce-ae49-4aae-b48a-6a948358abfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3922cb92-1b68-42a1-bb3c-98db40655aa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526862ef-cea2-4a20-b255-55ac11367c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.122.253.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fdcb9b-3b75-454e-9f41-39084b65ae9e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.42.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77276ea8-3738-47b7-8d22-4ca0505bf2d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.247.139.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a49b9e-296b-4fcd-a307-b7e68d2e7b73", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.98.197.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de92e29-5a52-4931-a6e1-e5d74373c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.119.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca483a9-25b7-4a07-b7d3-06900f94bcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.120.4.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff68c900-d251-4383-a7f2-dbbf7a0d43a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.17.95.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2934d0-eed1-4751-a31e-8d7e45f8de4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.78.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b414baeb-d45c-4f86-bbfb-a6b408d6a7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222c9612-ba69-4cc6-87f0-85dbe3f9de34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.235.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b078820-41bc-4829-b795-44ce16d2f828", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.243.65.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efda8bbd-c24e-44c1-bdd9-78453383f419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.244.201.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b96ecb-fc96-4d03-bd2e-028713c4ba4c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.28.144.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5069712a-d361-4f19-916b-7c1284d6ca9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.98.8.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe51a6f-d8bf-40b9-897a-4a4122812ca0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.10.234.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfcdc9-856f-4056-a7b9-0b4ef7f9a0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222371bc-8b15-4da3-b5b8-ac268a6c6713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.164.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687072ac-9f9f-405b-ac76-059826c17eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594fe362-b01d-41bb-8c76-15797cce571e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.77.158.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bfd81d-4bca-4125-8d44-0b891c6747aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.176.58.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0f73d8-d04a-49fa-954e-650c3d9db1f1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.77.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3524e8f-560e-4d6e-8ad6-e7ed44fd0c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.110.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e1e159-186f-4ad1-b9ed-fd06b2128386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.178.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d40e25-9906-43f4-8c48-e94794b774ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b5a568-9bba-4908-affd-eb6e4438d98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4bfdc0-29ad-4139-90c4-f9b9af4ba3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022f6d5c-dbca-4eb0-9fbf-b8532dc7144c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfd8934-1a7f-4213-b4b2-a994dbebfc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed4a52c-973f-42d6-81aa-fc5996d1a852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a82095a-a50c-449b-a38a-b7cf36043693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a553f453-150f-48e6-b420-cda614cc2d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddf5072-4f3a-49ec-baf5-890529a34195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f7d839-6ee2-4b50-8cf0-fcc5da676da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e555d1-1ec6-4e67-b886-203a6b55065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ff7622-b74f-4214-b812-d25428b1b1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de606e5b-041f-4c5d-a1b7-38b6d68267a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4052561f-c623-41dc-a1a7-57e5eda41625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0c631a-486f-4679-9aab-c42b7edfb4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969279d6-b1f2-4dff-a8e2-5cffd17db387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688da1ca-19d8-4eaf-ac2b-2977e5f00726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874a0a69-4701-41f7-88f6-28fa3bf94499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6504e0-9f31-4329-a6a4-f589c476a3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5320e55-0bcb-4780-b47e-9ddac96dda49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3ba974-8ff6-47c8-a0d0-24c7b990c733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b945bfc1-1146-4189-a893-8fa547c509d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d916ff32-7235-4281-8fbf-9f2e49466309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b7851e-3fc5-4cfb-82d5-c577f5dcfe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39784ad-d3ed-4685-8780-cca81654ccdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddd9f06-38d2-47e1-a24d-028b8bc4a66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46cfd65-0f61-4700-afc6-bff46e7afc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d159f733-40ea-48ef-93d2-8f8b21c2ef42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98eaaa0-6e60-4420-b183-4b0a059e93ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d93af4b-6e40-4cbd-8e2a-281faad1243e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30586fee-fbba-425c-848b-1cdc6aec980f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41203bbc-d1d9-4808-870e-8e513fe54037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bda075c-e79c-4f8f-87ae-afd737fc929f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cf6769-5693-400b-b058-18125f929705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7497238c-ce75-4e6b-b5a0-ceac9ff639b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1ab4b0-ed3a-4b45-89a8-25ed64235b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2da2400-03d5-4884-a2fd-57245be4c825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f663caee-c1e4-4939-94e5-2de443fc2363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed3603e-dda3-4992-970a-2206ef905a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bf9fcd-ba21-4b6f-8296-41876347d5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044b335d-934a-40ad-83d7-4113ee2c5b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168ed01c-f585-4b0d-89f2-e6287be3bfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf87648-134f-4c7f-9b2d-f3a4eba70dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746c2c0a-a0e7-42c7-9dde-96714f7ef2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed1b636-d068-483d-af43-f378e66e7e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36afcc2d-1aa3-49fc-a72e-c8b6772a6f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96445bd1-8e87-41af-af26-eb0315b3fc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93f6daf-f881-41ce-930a-6196b34cca22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3688c592-36ab-4568-99af-4a0ab94df4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c25773f-45f4-4d61-8584-3a7dca84a5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24cec69-a8a3-47e0-a0c2-219823776a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf142a8-597e-4375-beeb-b4a23c3ec91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a25ebe-8593-4a54-bb9b-077762c6596d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d578ee7-08ad-4cec-864f-3480c0497397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918220a6-6a75-4c4c-9201-c813d87baf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5fe976-d7b3-4d8f-bf70-8cfd2178122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7974d483-1703-4975-b041-69104ee800b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded1e511-fa98-4d82-b8eb-84a8d147ba95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3021f545-7eec-46ed-bc1b-9eec7b288791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf2c203-9ff9-41d6-b618-ca468ed12b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dca625d-f96b-41b1-a4c1-57094f92d48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15241e75-afd9-4755-88d4-05e56ff327f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee5e682-a2bb-48d5-bed1-f8b0a7ab0293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb10f872-3135-4539-a628-c8549d0da51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4385f77b-afba-441b-9317-4ee14b0a6370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ab1e40-dcf2-4c39-874d-b379fe6ed302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184315f2-dc66-4e38-abed-b992668dc460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092a100d-4bb5-4b35-9f3c-19ca08a860e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b695f064-b73a-493b-bb42-3945825f989e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3cf70f-2e27-4900-8d01-69ca10cf14a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136945d5-8516-48a5-a490-6aabc253f164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c7e366-efd7-49fe-8330-b3502373833a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03122b8f-3bab-4b63-9d10-6f3e0e4ec98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b852b9-7d6f-4abe-8e40-0748df219de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d75991-80f4-4c35-b83d-3ee6c05bed44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0684d2b8-e081-429a-9a20-aabbde156b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b45b15d-1e42-4b9e-8c0a-59fde64df8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e00f87c-be95-4317-8a9d-46e4a056e9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a30455-0bc4-4e62-bfd2-5084852c80a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f1393-0799-4cb8-9d71-0b53f62ce99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89c92c4-ec93-4834-97cd-e46424020392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55d0a4e-8256-4645-96b2-6b7cf050c5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8d094c-d089-4428-820d-8a9a9261fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7884e2-3c36-4f19-9fff-a4105bb48835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97aa5b01-a92b-44f0-9a4a-2f373270e39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8535f42a-9983-492f-87ab-5833899e1b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fd45c0-bab0-467c-b5c3-a1d461801a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e446f7d3-b5cd-46b6-82d2-69ae387fffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75ea530-2b05-4911-85e4-35a6c08345f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a512ff-4b00-4ba5-b11c-9542ef5a168a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cef1dc6-1feb-474c-be47-2774f6cdc29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a44ae6a-ad53-4e2d-afc3-f3351690b7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff260135-20d0-4594-b370-14747baea709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8270a36e-521d-468b-b720-8f4d068c7f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d76b070-9c9f-42dd-9a29-4ab21ef68870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50044d0d-231b-4ee3-b10b-adee52338c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e96be21-e250-402b-9561-9315037bac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0b3020-4433-4818-a342-234e8763163b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c98875e-1b0f-4c63-a8e5-9da119991fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96433b8c-1b23-4c55-bd50-cd139314eeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f39165-0c2b-4c68-b2e3-bcebac25dba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2941759-ea99-47df-bc62-8d8415aa4df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eff847-ad21-4741-a504-5c01750f0aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2c85d8-722d-4e40-a296-323428022a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fd8674-9101-464d-abea-d5172e3b295c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d967c5-4b37-47aa-86db-fcfd0b6311ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55804ef4-a6b6-42ed-8c30-19f67451ec4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff1782c-e6c0-453e-9959-bdc2c4040578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9826db27-1e78-4f01-aea8-efc59b09e6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b683a39-f5de-4e91-875e-e6980c0f9c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941d9bc7-36ac-4e68-97a4-f0cf7d7b2cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9ec8c1-9793-460e-9f72-9ebac230ec89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcce9f23-5105-4c6d-8d66-01fef2564267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dcbde9-0cf6-49cc-9565-ba0d11a73dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b68579-052f-49f2-a8b3-d2cbbc344d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebdc8e4-9f40-444d-bbe3-81bdb7e1429b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9480fa-c96b-44c9-a742-506f3f77ef4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609b893a-5669-437a-935b-67dc27cccee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ba3de3-7d58-49f7-8fdf-518f69b4814e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0f68ed-e205-4c51-b4c8-41f7c0bcc4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f026d-fde1-408b-9aeb-feea60ef11d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ec00bd-fdca-48f3-a057-b7e4ccea4150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be097672-8718-47ca-8c8a-194ff3652291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ae9120-58f3-4155-8ac2-f64cea36427f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9225e41e-b3cb-4f2c-a5c1-b611b4542e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fbd1a5-1402-4c15-87d9-376708fdaf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539d1377-19a9-4d62-a8d5-8d9f4e373416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad84fb0-37d4-4dfa-a5ca-86f802b97c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955a810c-2736-47d9-90b5-98e6798dcfdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7fa2e5-b287-41a6-8fb1-41d8c0e4a660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379fccd8-d602-4a71-ac57-83a995dc4dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765b6175-7dc5-4ea0-b7b7-6cff57e136a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb8ff54-8fda-4e55-b84a-6fe0e6930aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd2e16e-09ec-49e2-849d-5d1c3d6a775f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c105b12a-3ad1-4a8d-8868-4c4c8af16355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f0a8ca-a0c4-4a55-96ab-a6cb997e611a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20df3403-148d-4b27-84e6-ebb4f31b8612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e298860-edc5-47e5-9a95-b85dd49ed828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31a24e1-ef6f-4caa-ba6c-1a4136fb45ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baf0617-2e75-4244-ab9d-459839c2ac89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470496dd-1a36-4981-995b-b211a2543b6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c207c590-283a-4418-a5fc-ded77a12eda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.48']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4e4fc7-b6d4-4da3-b07e-c504850ffba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74869464-9196-4a4f-8387-0d5abac090e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0f9fd2-6e89-4edd-92d0-a94d1eb7ccd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9811a596-ac17-46ca-a834-45193f755ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329317c5-2c29-4b02-8e67-0fdff2af8459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f3ea99-c100-4a09-88ff-a3bf423dc86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c93d8ff-0abc-4946-b83f-a17c9152f876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc9ddab-514e-4ccb-af50-d58283230e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e751c23-76ca-427e-bd6b-4e06400a6165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4842a30d-9168-4faa-aa2c-2719b717c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f8c992-f890-4a7a-ac05-1e9039c84583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd22e12-8aa0-48eb-8189-5c0504a644b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b9e158-8c7d-4be3-8dac-8a2644e1cf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd88461-d89d-40ca-884a-9e6b3da08038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6654c77-b982-401e-b8bb-8f2b3c20ffc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b04c85d-d8ea-42e2-841b-3fa6e3f39ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44757802-23a2-4848-8623-0250801fb061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8143dc-4010-4be6-a93c-8fd80ab2c407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043531d3-79e1-41a6-b8ee-93139ff80c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbead0b9-0b6f-47e4-9c2b-a78b2d5a0a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e722aab-9fa9-4656-bdf1-d5ed9be4963e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a1025c-8c0f-4907-87e8-2bb8d1f58783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40e58ca-5259-49b4-b338-c6156b31b39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01979dde-3493-4b8a-9c77-adf96d722b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07324eb-cdbc-49e7-9f34-5f9bae132844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acc8e9b-6dbb-4d7d-8e5b-48c4b57f6f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4668ab-ae4c-47c0-8cb2-de4c0d469742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483dd0c2-1eff-4a67-b0f1-8f2bb61c2001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b0dc71-88a5-4a48-876b-54704ca3d6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f9668d-d647-4633-bd28-cf02813eec7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f996c1-d1b2-4711-bb97-7ec9e41d6d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9a805b-696b-49a1-a293-6381382a32fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb325cc-af29-4914-8ac6-8e76eaa2c8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9081c2be-97ce-42cc-ba31-a09b1e3734d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20c4d00-300d-47e4-bf5b-777020d9c4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14afb0e3-801c-482d-bbbc-a9e4a115b0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ad3a13-d3cd-4d0f-b1cc-e6b74351b671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa23513-225d-4e74-96bf-bd714e1d225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3397e7b3-6b7b-4bc2-a3cf-69005db68028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b276bb5-b7cf-47b7-a7e7-eec29b1b8200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43809daa-f1f4-45a5-8e1d-855e6f29c09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882e624c-0aba-4708-9987-6664690d1fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b612ec-2df3-4462-b6ff-832db992164b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b3e82-92fb-4c7c-8306-6c9c9662dfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eb8c3c-0d2a-49bb-af43-f124606ebd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790eed66-dab0-4232-a70e-165fe6a9d662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32043466-4b14-4321-b640-d499d9dc78bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dea16d-508d-48ac-a535-2d2b1a72c53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de519097-20b0-430a-b1a0-ec29423b82b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8488d470-b0f3-4a99-8126-4298a751a9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1096b72-8c12-4296-b2c2-8015e183271c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc599d4a-56e1-4b0c-9f8f-c6a19e487130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef03e1e-d702-427c-8d6f-35d83f7b90ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f0889d-0e07-458e-afc7-827f6c61ed6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530fc138-dc03-4ab7-870f-433caee91e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5697913-6d0a-433f-b4e9-4dbee1a23805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c86a259-9bf7-4520-ac50-5a1e3e662015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd78330-6bac-40e3-8119-7c5209cd926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f459e06b-c21f-4fa0-8808-5ceee4b28743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77869185-84e5-4ab5-a14f-481983fe593f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104b131b-27ba-44b4-a96e-aefb1bc82047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73bdc6c-c9f2-4563-bc3b-8a5ba7e4e3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1608709c-0ad0-43b7-b0d9-04f16c7b42e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73a8cbc-7360-4c6f-8c05-f8fd231b8e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8ceb75-6d39-4cb0-9614-3ab13d7dd68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a917b8-0b27-4657-a19b-0ef5b6a14732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd89533e-aa5d-49b8-857e-8bec3f4e2e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e23c62a-036c-4e6b-b906-e819191f8e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc90140c-8dc8-4f18-92b1-d538dee026ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4e7c82-3ccd-4b04-a18a-fb424f15155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644b6dff-7a6c-4a32-adf4-42c94ae147b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7c86a9-90bc-4e70-b4b4-d831954a7748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443ff408-4959-433d-bcba-4494edcf5a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6469b8eb-7a1d-4304-99f7-1c1f83fd5d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c43d11-5d58-4423-b069-9e363f8dff41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b251c83f-74a4-49f1-92d3-e7aa834da030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a913dc5-873f-4a44-9e6b-a834101402ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e7d8e0-eba9-47b8-91df-79646cd1cf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c85479-f3d3-406b-b646-6d5ebfc57ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d3b7c-60d4-4795-9eb1-2d841f4a59a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dfd294-9fa1-42fc-b5b4-819d82fdd493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aae0d7-3838-4fa5-bf06-f4b9608f2860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e98bfe-e2d6-49fb-9f0e-d1677da76289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ee47d5-a36c-4aee-be00-4439c9c438f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01628d01-729f-4a9e-a7ce-762b98e0ded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ff2e8c-b9a2-4c3f-95eb-964b45f2e539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9602f850-ca70-42d4-9eef-a14bee93f535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7887112a-21ab-4281-8b33-7db1be879dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c985cf-19ab-4d8f-a59b-a0189928deaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7484d230-c40a-4ec0-a973-f8a0d106afad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc90095c-2a71-46b1-94a4-e5a3fdf3d128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4a9e6d-76f0-42ab-8fa7-e64458d2bcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e03b95-c237-43c3-9961-f5551e4cef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb04af7-c569-4e9f-842f-cd4a64f03abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bad440-7045-48a3-9b45-f2ff20e6f5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077cd52d-bd5c-4e49-ba26-7465ff226c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e9db91-e0f9-417e-94f4-c2b2a4181b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257c3681-1662-4a9f-96c4-a8a93554e059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c0a96d-3d38-4de1-8ac3-b627f185b8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e411187-01c1-4ea0-8723-995f0f9008d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8967e1-6df9-49ce-b1e5-501030419333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44995900-e1c7-4ecf-9ec6-70eef0f6503f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dad13a-2612-4029-9a82-6cbbc4888625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae7b6d-9412-4a4f-bf06-9a6f4dc254a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd7261a-71f7-4035-a861-537f9967d7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dca0cbd-fd07-4909-8c00-fa7a5cdb3e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5c07ea-6a3d-4c0d-bd6d-6a43a91bcf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d45908a-870f-4b13-8142-2c1c771bebba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e6973a-3f17-431f-bf0e-59d804ee1ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c6d913-86e4-4503-a89c-c0d3b5306330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc276e84-6af9-4669-b268-597dac3f9921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4263a871-26c7-44a5-a961-4b1cc762292a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd3c1a6-638c-4c0a-89b7-7dbc7fd2d2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ea5440-d06c-49a9-bc5b-f7f2fa214179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f913c45-43f4-444e-8c07-708f7f0ecc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab1e10-858f-4320-a749-2431adb3a412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cfc563-896c-42f1-896d-a91e47b7333f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0f76e8-b607-4e2e-9c61-d675cb885390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad16ce8c-9224-41d9-b09c-b62c318b3f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04e5fe8-2f0e-462c-b7e6-ee9d7315bc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc27f5fe-f883-4e0a-a334-c20875189b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdfc3b8-b7a1-4160-b9a5-6a06b1539287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab969a5-bcfb-4540-9f16-dd25a4cc83bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273ba56f-5544-4193-ac74-6fe46743c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcbaadf-8aea-42f8-a91a-8cc05f0fa2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a794c10-bc27-441d-9714-3ff9dc1d5f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5a5906-ce2e-4408-8984-5c454e418640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e5ff55-baf4-4bb2-b4b1-04e79192eb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3855b8-d456-46ff-91ca-4c1a4b8ab895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1770c6-c9de-4f42-a880-c91a1026f7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ea148-cfdc-4cef-a8f7-6b1462f57a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c00c327-e4cd-429f-97bc-14f727dacd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5b8845-b50a-4355-91d0-497338ad6c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf9cb36-284a-44b9-b42a-9158f3d74b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e5583e-7a46-4d38-9a27-79795af75464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5255c697-e673-4d0e-9d0c-a7eac31e8d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0ac81d-c21f-4f92-b682-fa17063c8db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6358306-4413-4b45-8354-643e5145bb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5c9481-945a-4f85-8f56-ffed5927a586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884797e6-5237-48c0-b5b5-ac8bbbf3bfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98f13f3-e932-4a05-8121-10b24218fe20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442740ab-7158-4c22-961f-a51dd7b71058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effae6d6-521c-4161-803b-b4d54b1170e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f92e25-3ce8-45c3-8001-721cd8a402bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f06c2e1-b729-4fbb-bf13-330ba0d78566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1851815f-f1b6-490b-b851-607523497916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b03fe64-c059-4523-9307-e5dae0507471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b76d41c-3d64-4434-9997-dd36f75d4c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e47eb92-cde8-4ec5-bb06-7159515ec9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0ef5c1-5ee4-4430-a180-8feaf8b66c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766e3dba-1ef0-42da-a45e-199655ecc7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db2b2d9-65a6-448e-9447-acd55a427b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5226645b-fe02-4645-9fb9-d71e0449c7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c7ba71-aead-4496-9ef5-4a71b5ed32e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfa2749-55a4-497d-bc95-de8cab26390b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2efe4f6-d5a6-4ea0-8b35-6f93b5880ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57d855-af1b-49ff-9271-e568f94fdcaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e534a888-4406-429f-aa5b-b5d7a8b8923b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983e3435-474b-4e8b-bf89-2e641dc8cc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b239843-e28c-45c3-b590-35082b9a7290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48854082-164e-4c14-bdd0-b50648b86a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97777cb6-0ca3-440c-a88d-da1e0257c135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9280c2-2475-4cae-8873-cc979c5963ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9a06ab-9e28-4a17-8a8c-936f6cac916f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ce8ca2-42cd-46c8-9f7f-15d08b098365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de85faa-5bab-44fa-9640-ee4d8c617c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e9996e-f2bc-49be-9fc7-56f479892ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7e6ee4-3ea5-4ca8-8f78-2bffdb9f6904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b47e3e0-0a55-4c10-92a4-7971fa8d2e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ebb9ce-112f-411d-8871-309d8710c0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517fabad-f9d7-4b1d-b39f-4aef6dfa255d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d593fa-3422-4fab-8353-2c23d21b4de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f47736-df44-4922-bcd5-2e3558816a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2543138-d9d9-4a13-955e-a589cf8d45da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5618f3e-c31c-4416-b9d1-60090a6611b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee3c16c-7d50-4b9e-b384-8e99f7d10cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2aceac-4c2f-4d36-a863-d73059af0b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603566be-1707-4bf2-85c9-05ce6d8f82ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f148778-7051-4877-ac7d-a6d784c000f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff03f6b9-3f75-4ab6-ae0c-69fc6a70b9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd80f80-f8eb-43ef-bf18-f48fd3223e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4607e9-7fe8-4a96-b810-5e9f92cd8cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189dd3b2-7e80-469b-9b77-b7ddf61d9ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddceba51-4ae4-419d-90bb-75d704c557f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96405597-8903-4ec9-b850-6aa0707970d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd072709-935d-476f-a80e-214eebd66de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7ab05b-8d0f-4e50-8b02-5eabd42816d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6d13a2-48d2-40c5-af12-3de7edd1792a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815fe718-a784-4523-a8f8-3d3f05ba4bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3fbdb3-3ddf-4e4a-905b-a800881f2f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f826246b-a78d-47cd-b9d1-062105011c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962eee93-3c67-48d7-9bcd-41d3953aef92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5e1a13-2950-4e0c-a3f9-7768e33890e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007408a8-552e-4e62-9933-8b941be5111e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0350c7aa-2ad0-4294-8603-0de5151201ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40de545e-77b2-4623-80e8-984550fdf421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b920e62-dba7-4412-9efd-666343f584b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e7f144-e25e-45ec-9d8a-4300a0e9b026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b150f35-3942-47c7-9ae5-c1c36177dcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7090a1d6-7005-46c7-9cc1-054ad2f705ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a24725d-0d4d-426c-89fe-b2867a132939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71a2260-705b-42a4-996d-34c8f654eeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd00e5cd-4fbb-4fca-9d6d-d071ef85e689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00408c6-e047-4e4b-8c0b-722e456432e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e9071a-2b76-452a-8c8e-ecfef1f482ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8900395e-6d74-4228-99b3-6ea43f2b0156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d34249-8162-42b8-aca3-171f608830a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dcc945-84d5-4510-a04f-a4ec4f5e6e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c15136-9402-479a-a6ec-232104db84a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307a2002-5e05-47eb-8cb6-9571acd84bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8b7a35-5591-4b01-bd0e-b15f03e5734b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2196b698-2b5a-41d1-8392-cc3f17ad5201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29d62e1-a0af-4cfb-af13-ee8c7bf506c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee97c66f-9d47-46c8-9c4d-d7824d3f9f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1899727a-385f-40f6-bbc6-c741eb789aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585e77d1-9577-4329-9e3a-010b04714560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600a610f-ab8f-497e-b3af-4edb5bf542e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3816737-8208-419d-a458-7d3e4abf26db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f149e84-e5e1-4829-aeb5-ba1e95624f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d424dd-ad25-4f4f-bfec-84c7142d5c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a02063-1de9-46ce-b88f-3f0d263592c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c01152e-00ff-4aed-9e09-c0916e4dfc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adec7800-56f0-4e49-9b74-bb3ebf29a096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f350201b-8be2-410c-a3e1-09e4e402c55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7161dae8-d44c-471d-9e2e-b28c5448447b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebfad67-a20c-4c6d-b9aa-1bcb2584a8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ee0fbb-15ed-41c5-b054-7095125b6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0641f544-998a-48f3-b699-b2e14fbbbc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518fb82a-0743-45af-91bb-5bbbef4e9de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e199afa-b199-4520-8169-344e8e4bc6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036e1a1-3f90-4e05-ba05-d51d3fb86085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3b01fb-3916-4189-8b66-2b88c9083ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e122c5b-0f3c-43d8-93fd-82f59410ebd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bde043-79e2-4c35-9c9f-f12fb6f2e36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16290933-76f5-46a0-9408-15a89d1c2c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306136cf-ae3b-4e0e-99c3-b54e8b248b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6da3a9-4181-48c2-a40c-3d15757c03ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281de13b-6c12-4796-acaa-ed0e065ffa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ef0134-e4f6-47bf-80e1-838fecaeaba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c615e5-ee6a-4d13-bb8f-d97054c01490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6233ca-40af-43f6-b331-19fd042068f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a245b8-8a65-4278-a290-3a5dd446a515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5912b3e-1171-4f90-8997-a16ee17c8363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c134f86a-b2d7-4131-8c90-72ebeb4284b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e8faa1-465d-49db-95b6-0c6ea14ac2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc4d927-9298-49e8-bb06-6e67ad24e130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4674b0-f225-4fa1-b9ed-9d55d7acf0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.60']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fa93d1-e8b4-4a5f-bfe7-e903003d2dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f0a3e-a741-4375-af36-cf2553147239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bf9acb-0efd-4009-9a95-3666d3e5f3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4450b6e-b323-4731-9b31-2b94d2eb0900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75676cbb-22a3-42ad-921a-f68ef821aa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3a6063-d1a0-421c-8f32-245a29a279c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ddd812-172e-4c14-b67f-0dd3761da0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04020ac-6264-4ef4-a49f-634b9063651a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ff8e14-c5cd-4271-8a7f-2867fa7b053b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feb878d-79cd-426f-964a-5e70ec59f557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d326db1-5120-4ff9-8dfa-8dbdc8ac2799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545df5b4-72ae-46d6-832b-04b216035ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96e8d7c-6e8c-4db7-84fd-9e4196e80f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec735aaa-5a3e-419d-ba33-aae508835204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5e87a1-518f-419a-a2e6-3abe5c937f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab140b09-18cd-4ff0-bc3f-6f8e71a106b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2764479-0ee1-404e-8b90-8ed41802ca77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34673ab3-59bb-4df9-9c0a-566e79b14c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942245d1-a8b4-4651-99b3-be5a947d06dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edbd77b-95f1-4fb0-a895-d61edeb4162e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aebf703-63d6-4408-af54-0852c9b97523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c035ff-3f01-484b-bb7a-24fce3f2bae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781b189b-2fea-4b7f-95f7-08e686d9f8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55e7018-b776-48e7-a0be-432b0f8875de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c549837e-ffe1-48f7-827f-e2a2f4e17ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2749dc76-9cd5-4cb1-9385-acd6ffa5973f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad90c8d-e42a-4ffa-a321-9183cdf634db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00f5d88-6e9e-49ca-9365-b215c058833a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b49a31-a154-4c90-854b-2183d7765b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2a65d9-779a-4b70-8aa5-4baba9d87d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b76078-f8be-4a6d-881e-a5021786777e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdee0e33-5856-4374-a1c8-045819f6b3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8271bc-1359-4465-a3c1-9b01c0ea128c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.29.157.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f6487-081e-486a-9e4f-a6877e7741b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.8.6.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9915d407-2648-4fa8-a578-85df65cc11d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.134.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b48e8a-14a6-4d6b-9a04-81a8a72c8a11", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.160.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b670f8f8-08cc-4f34-a014-d73a7221d0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.185.103']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d6c7a6-d640-4214-8671-ac8453618cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.189.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cfd8b5-8101-499d-902a-f563a3e6f182", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.84.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45de48b1-1444-4d47-aad3-15feddffb363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.95.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f33bbf-3238-4c2c-a0df-c6b6331ff50c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.227.108.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151b9599-fc18-4f57-9069-d53e7f5294d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.23.166.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0f7215-db87-40a3-9fc3-71a4fb18f041", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.231.24.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab427837-ccd6-4553-8e05-320344492566", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.206.62']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a272ea3-689f-4b01-a7db-cb521b3017f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.100.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75022c2-cab3-47be-93bb-08b6f6da78a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.112.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddf3f3b-db5b-4bef-80c1-5d72408d8baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.115.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b76f1d-08b9-4776-aa74-0073be2a132b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.116.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7470281a-601c-46fd-8bd1-9f48dbd4a16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.129.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b5b45c-af92-48d4-b4a6-748734a5ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.141.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770d4455-4b51-43c5-b55b-985be065bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.16.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7dd255-129d-41cc-8707-5b1b1e1a60b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dc0879-6d04-490f-b922-de6856e1204c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.26.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd249fc5-f94a-42c7-a63c-cb1d5a92c359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.94.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9658eb-6d28-4140-8faf-88305a0ad4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.5.83.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805618e1-ac54-4b9c-b733-6cf1189b4392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcb9311-e27d-4d92-8007-08e67607c45c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.30.206.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e9e350-2a03-43a6-af87-329c66ff3772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702db57d-0879-4b7f-b567-3bef71cd7d2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.76.244.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fd8794-d648-4f8d-bce9-2e014e51bcd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.193.249.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11074983-3ee5-4934-8834-49e369e410c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5a8697-8132-455c-9be4-a21102364fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd1a85a-6b0c-488b-94ed-2645aadb2087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b67f23-90f9-46dc-8d46-e21d63f15614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f4ca53-0440-499d-91f9-e7c5d4aa5622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915ad62d-e9fc-4f58-bb0a-d3e0c18eee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721acb68-9440-4f71-a78b-a22e907725fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f132f8f7-88a0-4aea-9348-fc0f3c3c4e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60bff42-f5d7-4ef1-87aa-217c1f6e8c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ae0ba5-9b27-4e2d-9ba7-adf2129989ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d539ee8d-7179-4da8-a782-4e507eea0f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4552a3f-6cc4-4268-9208-ef492bc747e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6700be-2d59-42cc-9aaa-c44a762d171a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc34f7d-5307-4d98-aaff-8a29fdb3f2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1b59e1-c162-473a-a091-e7c0a664daa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3e3dc9-03d1-4df9-a83c-c979019b18a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138b7393-7e9d-462c-9fa2-76d0000999bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6497cd99-1fd4-4d66-bc44-d884363d4f48", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.226.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fc4f56-8cb9-4e92-900f-3ca16186aa57", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.17.34.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7be0c9-6b74-4326-9a24-419729ccc6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.209.114.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1720f40b-6916-4875-b157-c9203d8b80c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd5513c-ab61-49c6-ac06-005c83bfdb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae4c203-14e9-461e-bf0c-95683c6ec2b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.173.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b40b2d-a867-4c9c-8a73-50feee658ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebcd007-2546-489c-97de-ab2553307127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41019b49-973b-40c7-b8e8-87d698d7bd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.211.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77d093b-f8bb-4221-bee8-fe8c2531ee3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.148']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4e921b-c57c-4af6-95a0-baf514b6dcbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e3234f-1537-4625-b414-9b79f755d390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f52fcbd-51d5-4452-bb60-679667566a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9604a39c-dfc0-48da-bcee-b546be966e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c941ca7-c5cf-4535-bf9a-669dfd976151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4f6516-6ae2-4540-bfd5-0b08d295c020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fa0c92-e71e-45b2-a237-3d078c32de6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5b1998-b553-48d6-915a-c7a56edf7058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d61fbb-1e0e-4f5f-84d4-834d62717294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92db9978-93a9-4bad-a6d2-72906f30897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1586a698-cd8b-44db-b1b8-b4509fb046ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402dc1a2-e40a-448c-89e4-868554fee383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2c7d3a-d73b-404c-826a-1ff980913bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1867e52-b998-4f5c-a84f-d3be88cc3b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37392ffe-f12d-4379-a284-d9521900b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a77ae33-5c36-427b-bdcc-93440b8c468c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bd7454-163e-4a9b-927e-d00adb3bf596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.155.158.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079a39da-a9f5-43e4-b921-e779106dbab6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.157.219.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d47420b-a009-429c-bc90-921680beb588", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.79.213.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2d73e4-1b9b-43eb-9682-c1c76ef98b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.28.190.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6a534f-1969-4d1c-849d-8b48a1424467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.39.213.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aeef704-78d0-45bb-bc60-4645ebd7841a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.51.4.24']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d39f70-14f1-467e-853e-b497dfffbd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45163483-d4b0-40ae-85fc-b4f0fc830c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f8da95-0383-4159-b01a-b97d4e7d4e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d166f0a2-f375-4ec6-ab77-a7c48720c6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983fed88-7e65-417c-b1f2-9c2e2510cd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0a9d87-03a4-4ce8-8082-2d4f6a97b1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.89.245.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbd233f-9f98-443b-b2f5-7f97f30776b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba1b4dd-f7f7-4146-926c-6caf1a6b48f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba609c-1197-4d91-9b07-8f339267aac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a5f755-1041-4aef-bc97-9c9a99af0a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d75ee8-badf-4819-8f99-590eebab4e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6bc141-18a6-4138-960b-710df1eef07c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe15685-2f6c-4ba0-bb66-c89d7539a314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb219b4-dd6f-4e0c-aa8d-64276a39b1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909bcac9-60f6-4387-92b6-f0dbb3d1f518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157925b5-c15b-443e-8b07-54a349eb49ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f46ed6-e9a5-4b63-b151-4d695928d434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0c49dd-7c5d-499b-a9fb-6e0741826050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a03cc6-7632-483b-9f26-1d291292c988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f49fdd1-8e99-43ee-bd6b-a6042a5019a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629505cb-2a17-4411-a898-c2486bf63736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a84bb2a-970d-4866-9232-137accd74b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28b323c-cd4b-4c60-9981-0e4b5c833e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3ba6e3-f145-4a0d-b7fe-3df47263408c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d06938e-2a06-4ec8-a6fb-055424b97312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6397a209-e146-4d9b-9682-e0006e7d0950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e0465e-72f3-485a-ace5-29477ab0ca98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5d2fe2-099d-4810-9f9b-7ff60dc9a348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ebd85b-2ee7-416b-b161-7514dfe55079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f623a310-0bf4-4a57-9877-9be830e1785b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e3345-2706-41a5-b876-a0b58a364c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.19.88']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096a9b1b-a0ff-4b74-b865-65c04ecea53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.48.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872993fb-3210-45f5-877f-7678b9a2eddb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.89.154.59']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982a36ef-9d8d-4758-a613-3fe91f6bc773", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.104.0.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5038e3-4474-40ac-80c8-64dd3efa2137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.110.236.232']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986769f2-2418-4d21-b92e-5d824abe5f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb894c0-f759-4055-8d8b-2d74e0be61e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b6ec3f-23ff-48af-9360-ce2e55f19914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee008da4-4edc-4c51-a187-3cee1ef12b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d547d0d7-d2be-4b98-be4b-28e835600d75", "relationship_type": "indicates", "source_ref": "indicator--ee008da4-4edc-4c51-a187-3cee1ef12b36", "target_ref": "vulnerability--48968251-4c1f-49e2-bd8c-298391c8c3fa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9847d270-fc11-42f4-a295-47809bd48b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b44343-2bb4-402d-9b4e-82aa3e273d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e2c431-20e1-437b-a8a1-3966966ea807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eaa335-87c9-46bd-a110-68bfb55db25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbf46f1-19ea-48fd-b313-5b3191fdc864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dacb87c-974b-4fde-9531-5e2b70ab40ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad0ea1c-092d-448d-a641-0a19817184e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe27dc45-0939-41d9-bc32-d9491527a4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728ba4ea-de7c-4440-acd1-59d0e98b24bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74c3677-712a-467f-a9ec-d33866e6e759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb37fac5-a6b4-4c9e-b9fc-7539a0dd4cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c451a0-8a72-4c1b-a393-fe0637e8e83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f57d24-5ad2-4b7a-9151-c3c417463eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2e2740-a9d7-4965-b29d-f14c489cfa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d833b33-a05a-4c3f-bdc7-501587850709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.239.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a64a46-0469-4b9a-bea7-8a2227db0e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.204.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33283ee-4ee8-4a0c-954b-0cdd13a0fbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.225.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54614e95-df7f-4a52-869a-e9314ace1f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.154.5.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd639ff-a484-43a0-9b14-63fb2cf8dc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2d5833-e39b-462d-ab51-7e9d73e02c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddc3aa8-5450-4ead-a5f4-19a9ad453701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2563028-1639-4d59-8ac4-2beb307285c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8188e5fa-a95e-46fe-9e18-424c1e708e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.85.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955e1007-40ff-4c6f-8013-839a9f5405e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a74bd9-a769-4eda-9531-3cf567378eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.4']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3e75ff-f50d-4f63-b4cd-e30973c60078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafd2522-0f78-45d2-98e1-ca72f6ebcd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed489ac-1487-4e6b-bdd4-bdf15c3d6d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5646564-ac46-4ac0-9126-dbf8aaefbcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d3bc71-5ef7-42f9-9c4a-6e9128484da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1254099-3e58-4cef-a033-dde7679e3969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.28.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac19637-c967-4f64-8026-405fc4c81907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb03607-cc1d-4f82-aacf-48e4006e7aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0e206f-e461-4f77-bd3f-00551722461b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e4ea44-49da-46a0-bc04-a9204cc39653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16f29f7-fa0c-4f36-8980-d5b2494987d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eebae1-384a-4db1-8c2d-c950a1a5cb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcac0a0-326a-4c78-a17a-3f334aa91b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b96f0a5-229f-4754-beba-b3d1feb1fdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8033bb82-8396-4108-9ec2-d17f31f7ecd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0046e53b-bef1-426a-bef1-da56c0d398e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d9b0a-375c-4f8f-9148-10c15cde7bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67c4fb4-213f-4c44-9172-574cc7acc414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe68f6d4-bfae-4cf5-ae05-538be3ada60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6633b8e4-91be-4674-9c81-5285c5de8752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f275c64-42de-4bd8-a740-ebb538215856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db76b42-e344-4fa1-b9e9-1caaf17e4611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.84']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e17cbca-93a8-4b87-aef5-e5cf22ef2b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8dc4d7-1f49-4888-b4b1-c443b88e7ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.104']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eee193-0a21-4881-b618-f2e441c27f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc8c6b4-1bd0-4945-b6ee-5def30b19506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf414f3c-60dc-4926-b18b-d22240d7ea17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a30bfc-9bb3-4ed4-aeb9-b1bc00625540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.214']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923ef960-8707-4ecf-8c0c-5107e61fd313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4662b8db-d577-4120-9555-3a17a028f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.82']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75ca4dd-a9a0-44dd-a4d4-75eaeaaf07e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9248f6f0-6f91-45a8-ac36-7e0b0a642d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.154']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf98c65-765b-4481-9df9-aa1049030f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787d7286-edc6-4e14-ba80-f3da307e5451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a9eb98-b77b-4c0b-a7cc-7c214f4cf4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd2bf08-f43d-42f8-888e-be246b2c840c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739f61f7-0d6b-4f75-b8ec-5b447293f0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423860db-2d98-42f5-87df-2ca3f836cb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f9db72-abd5-435f-93ef-74b8b2681511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814955a9-7c64-466e-bad0-b4f46518386c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a393ffd1-b3c1-4aa1-a128-10cf6a9a1407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5d39de-c415-4662-9a18-19ff10f772fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dff1e0-1c4e-44fe-be4c-0d5d5ccd1bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.61.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876a792a-b989-4010-8fc1-1ee152a24931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.100.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab56a0c7-1fad-434d-9b14-ed698a1eb52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.11.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80862c45-2a7d-4c84-a114-3481929e34f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289428d1-6073-4cc6-82ae-f6b1f5f752e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.76']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3cd2b2-8ff3-4122-ba01-e4dfa3d20613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.2.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43a7ec1-1157-41cf-9182-9f5342cf2c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.8']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97985ac3-5615-49d6-8dcc-13c47ce46f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.155.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b18af-c166-4fd9-bee1-df9a74958394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8fe9d1-6375-4659-a39d-ccec1c028c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.163.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640f1071-4ddc-4cb2-a43f-8ee45c84e050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.210.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129b4ffa-af9b-4f1c-8dd2-bb7e470ab832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.225.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d79f1a-365d-43f0-9f0a-3dd779dd3a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.241.132']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da4eb5a-e823-4d27-a6bb-d7090d56470a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.231.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317836ff-131b-4c2b-9514-7ebcd01d9f7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.243.73.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dec842-73ee-4579-bde1-7c77d473eb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82865ae8-2565-4d12-9891-c947daf3776e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.76.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946cc4fb-eb48-4781-ae9b-071b66b05efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27695a86-a018-41cc-b1a7-76b18525fdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7545a0fc-b3c5-49d4-b106-72150ce16aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3921af93-ca96-4a84-904f-c8d9d89f40e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7ca00f-827a-4624-8c01-32f30d146873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c42e4b2-4c7d-48b1-bad1-76e4368f8c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6794c711-4cf1-4a1f-ab91-ddf625fc1dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50cd88-5090-4a72-a26a-1e89a9ed2b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1b2749-1fad-46c0-a9c0-4bb5ece3b9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8fbe2c-2d94-49f2-8166-e6f79ac84443", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288ebf56-4cc6-4cd7-84e6-e934d4056db0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfc6147-5564-4169-83a7-7510dc7508a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0be92a-8e73-447b-b9b7-1ad4ced866a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834d828b-cb4c-4aef-b258-476add9bfb2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33243e6-f511-444a-ae8c-1da57ff17821", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f66636-f1a7-4214-9a91-f10b7b264f30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78673cf7-ac4e-4109-bf69-1c0942208154", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df013b17-c632-4165-968f-b37ec377363d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15926366-b580-4b85-aeda-826ce621773c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abb71c5-abc7-4e1e-911f-de1d8e092fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fc6f2f-ec49-4d88-9197-a1c6cecc522e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.96.112.184']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a69de9-eff8-414d-b5f0-0d2b7a776bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.99.70.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c75a9f7-ab55-48ec-9d8d-6e1bf33347a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f039ca91-c4c3-4809-9432-8c4887ea08f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c888b9-d987-4589-bcb9-3c6659e3c49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09ee81b-d668-4e4a-a5a0-8e1c12af4080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef08355-cb33-4a35-a86b-46b348d94442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8016f7d6-a98d-4af1-89b1-50fb9aba9ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa13bc2-ea18-4d83-aaa3-5d224ef51cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9732d442-39e9-4334-b798-035fb6c3a767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33c5d78-1d6f-4de2-a628-6dfc83d65837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8bb40c-35f4-46fa-9955-dcbe349349ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.220']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e329de-1cb1-4d89-b9f3-84ce0bd7ef0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d832915d-7206-49e2-b921-80cb6b7188b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649266a2-f009-40ad-9330-a88241b57d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9364aaa8-b6e0-4dd9-9720-9bbd091b46f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d4dfb9-be7c-4919-b007-077c9207276d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.234']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef51fac8-a74b-43b0-a348-4c229983906b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a74a4a-ed70-442a-9476-d9a98df544ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be8cca9-d0ea-4316-a93f-828cb2da111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68b8f75-11b4-4f25-8aa2-28ad95990b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25bd9a0-20e5-4847-bd2d-d2b97c449f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.248']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45c4b0d-0aed-4b2b-8d13-fe5cd3834207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1215a1-8b90-4f22-905b-56e00231999f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.213.166.167']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6af8cf-a62a-4b91-8dbe-33c27f08b13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.71.93.64']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff157329-d2ce-4fc0-b7b5-d6b1623153f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.102.18.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3852cf1-b619-436c-8a20-c594110f940f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.13.34.128']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d53484-f690-447b-b229-3c387b943328", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.165.219.0']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6409ddc3-432d-4831-8a36-cc325ae00ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.209.208.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d76d446-860d-4692-ad60-426f6f49ba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.165.106.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ca3770-5b3c-46b8-9e13-c2e722319226", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.167.181.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab5f4b5-1a26-4611-94fe-1d384ddc1c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a923bd15-bfe3-46a8-b38a-1d2f3951228c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23914c9-aeda-4246-a7d1-ad3af95225e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.141.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31ea5c9-f4af-47b6-8d13-12faff71292e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.33.123.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e59d51-3f14-491b-8bb1-d2f22f46d958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28e3e5a-00fd-40e1-bd1c-79dab24cc92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2152a182-6b76-4975-8803-2824656f6e43", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.193.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a017470d-c320-49c4-bae0-3fab21926ac8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde6c6f1-8ae4-479b-9f50-73fba4982253", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d774f2-59b7-46a0-95ae-ecae1a500251", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676b3664-d209-4111-bcee-97c5dbd4fe43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6267ac0d-d0e7-4bfd-85b8-d91e6ecb7ab0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e8beff-35ca-4f43-ab11-e7acd2957cd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3838573f-2b84-499a-ade4-57451acba19f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1be41cb-2d97-4899-ac3f-e22e67d864dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d06fec-8f92-4084-9f7f-2d4869ae6eb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32be650f-f6a4-4ddb-9d7d-ec9faac82682", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97692e4a-b6f1-4e1c-806f-31c9b22f4f34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca2fd5d-e9bc-43c2-9c2f-2b16e95efade", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49695638-f47b-41b9-97ae-978adac0bdb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dc2ded-d155-4453-b594-0863abea311e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10e2d27-59f8-494f-90e4-2e10e40a9c70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee02db19-f3f6-4e56-a46d-8c49572a8dea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42edfd39-f496-48dd-8bb4-88cad4f967ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e86d968-394f-4fd3-846b-76a74b96a2d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228456fc-2ca9-4d09-8198-fe0fb7da9de7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822bf037-2d14-42b5-93e0-172220bf6668", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7491da2f-6fbc-4e0f-af11-c131cf85107a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435800cb-f660-4aca-8db7-a229d890c9c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2422b75-faba-4a5b-9596-f9c80bb956d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e34efc-5973-4b9c-b18e-ce8162f513b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77711730-a7cc-43d3-9279-391cf202e510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f557649a-30a5-4c20-81fb-0dd4b1e914ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494b6685-600d-48f5-8a26-7e320e547ce3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.8.130.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fbda10-3f32-4e74-b49b-d5db10e37dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347afa20-6861-4700-a3b1-8d174dd710e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.24.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc88fb94-fccd-49f4-b552-99cebf5502b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d858b85d-0feb-4229-a323-c658d3647ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d7f55-e9b3-4ff2-b88f-df055ef02162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cb8bcd-0b92-4513-a9fd-813896ec355a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9b1a6c-fbe3-42cb-8710-7d58ff755297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cafa35a-8007-42f2-81d9-f74ac560af5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.152.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4112c3fb-4f0a-4b41-bf84-11b0c13c5398", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.174.232.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ce9acd-e7ce-4ee6-9ea9-0ace76a3305d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.238.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2094a5e5-e2ff-42b3-a3c4-1e7926c845da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1447a8e-72fa-4627-b624-f2ef3d3efc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.228']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e852fd-8cb1-4683-b33b-9d69ced47651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bb05ad-b74a-41b4-8e6a-2ce4c4ad1e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17a0683-0280-475b-9a13-53ad6b64c5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da60b588-b194-4d89-aa78-e8ade713f1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47439fd9-58c5-41cd-af48-16611a4d7bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.203.20.57']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b145333-d97f-4799-b833-e3ff2ed19b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe4a88f-1e4a-4cc5-abf5-87da62421f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b4e94b-36a7-4160-8544-2af13fb135a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86da853f-31c8-4dcd-b0e5-0137231a50f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295fdf7f-d2c7-4e30-991a-6cdf9afda17d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.139.35.163']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e52fa80-a3a9-4bac-a3f5-73c0af3963d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.156']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb4bb4-770f-4bed-8d7d-807ad5a616ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f63461d-c585-43a1-b7f5-032ae346ba7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.146.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef554f6d-ce98-430f-961c-8c019120f013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.19.193.252']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30c299a-22bb-4794-8d68-8658946020d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.22']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea6334-4496-4ebf-b817-c59e8d95886d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daad9af6-8073-41fd-b390-60a0def9c0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e1f78a-3266-4b82-85df-5ce99b8df63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938d36d9-facf-42e6-a245-145a6875d918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04586405-8656-4b5d-92fd-5ec44a2232ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.130']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8db63c-4167-42aa-aab0-b9ba0d05a642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e256c6c7-62b3-4f35-bfc7-06b18283c778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f93ef17-f330-43e9-8227-bc080250dec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca58e259-0381-4d23-a903-52e521a847a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31067096-093a-4e25-9f1d-131ae258512e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.138']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720e9258-c952-4f7f-8cae-39545789ce3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0ff696-2445-4215-a576-de817b0ff9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ca8c18-e10a-430e-8db8-59da6be01d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0caba09-2c2d-4a94-bb5b-ea4b3a235300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22d42bf-c13e-4a8d-878a-770872b076cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48216a7-c0e0-4357-b892-6126d8b2ec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d81c7d2-db98-40e0-9756-f2b247f31aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2a1b1-f272-43a5-9fd0-360cec363ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec5bc13-89ce-4b52-abef-ee820f8f04ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0349135d-0420-4959-8f2f-971986b12e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4ae3eb-d787-4550-a377-748d3ce5b18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e7f1ca-dc00-4439-8f9c-3394d7746da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4260c3b-d840-4b19-9074-4d9ea07d81c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.223.176.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521760fe-219c-4c2e-8eba-217d4f6c390d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.182']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56973c60-0771-46b2-a320-b7d6ad07fa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91509c49-8deb-425c-8d51-1d15e7517f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5c9b7e-6873-491f-9a9d-f2990633d66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.227.187.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee4f9b6-f5f7-4f4e-971b-ac7446111d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e89ca3f-e748-40f7-83db-53e199a2d8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ca812c-17b9-4275-81e5-19931ce57b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86cd366-fd35-4dfa-8895-304b516d129e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5ca465-3f63-4c5c-8d56-52229709b5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbc19af-9040-4dcc-a28f-cd04747bcfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d70441b-c810-4908-903c-fd37486f5bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b48466-5c77-4621-ad74-80052c94d3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.102']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0e44f3-df01-433e-a0f7-8b45ab010a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffffe6f1-7f51-433f-84db-931cedbaaa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60ec1ef-a876-484b-aefa-a7dd5e96a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202959ef-a11b-4937-9ed7-40da9cfb003b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe09b11e-211c-4b23-bfc0-ac0b2eb7075f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d151b0-1edf-40e5-885e-5a791555f3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4554b5e1-7e55-48ae-824a-ba78f405921f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba96074e-d3da-4a21-96e7-5ef3ddde354b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecf7231-2030-413c-a0eb-064fb8f88886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65e7755-9f34-4a89-88c9-b9270b08e258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889b86fb-5156-481e-838d-065b1a885f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f73c0-448b-4345-82b3-1d6e21909946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd543bef-388f-481b-bb6a-11e36a62f7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe226404-9f5d-4323-9c6f-5b28944de06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d250aac9-3b5c-4958-8fc0-2fd2c3c859a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d787c3-a5b2-4dff-b366-80e945e43873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93d7309-aa96-46e2-9f1e-971681924793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c517ef38-2ab3-42fb-b1fe-b266342581a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a44c9a-4000-4e15-b35e-4c4daff37339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9462140a-5ad8-44e1-9c80-f2b30282b8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d18acb-f637-4545-afb0-79a9c3f98669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5393fef-6703-45c4-875b-06de25df417b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740f1b39-1f5a-48b0-9f99-04323848d1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87712599-5e72-40fa-92f3-7b9784d83c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffa7af2-945b-4974-ad6a-1ddff962447d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09c2274-314f-43ca-aa10-0c436d8e6e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9b4205-1646-4ed7-94db-b700aa3dfb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1350d3bd-de0d-424d-bd55-33641a7dee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.97']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d27b26-7a3a-40d5-a4df-d390e64a93e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab441f-e3a8-43d8-b229-f0becd2b8006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5a7333-13e0-4188-8f58-f46a04086b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e45844-e745-4698-8d7a-b17bd051a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f100d0aa-4aff-4621-8790-e3aa26a4d416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17617b47-da98-486c-ac46-660060a36220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a973b51-2411-4035-8f74-af32ce37ede1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3359635-88a9-4616-817e-875e2c34b5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba2d0ca-3765-4b57-a289-0eaece8fbf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17b2b9b-ee16-4aed-b706-bf1af6188c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e6fbeb-881a-44b4-a4a4-f8ba78b39222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06edda2b-4a11-4069-a289-3909b4bc6ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b1905a-a751-4ddc-9d94-052cfbf0d75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dcb14c-ef76-4308-b98f-0d0170a8a207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434934d8-6650-4344-9072-653e2a0a3fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8628ac-f226-4159-9df0-567e51b412b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10321c6-2ae7-490d-9e29-ed068a2fc35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff93835-b447-4df7-bcbf-d643d095d87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d93741-42bd-4ebf-a004-a260babb5904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e674b295-98b8-4669-b1c5-783044f8b276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cd0a9f-e540-45d8-a2aa-72073c2168cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590831d9-2fa5-41a1-9888-021c51770749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5f4264-b480-4df5-8316-a42a4061b844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec52eddf-69ed-427f-81c1-7d98b4d91193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b205c44b-e9c4-4cdc-8eef-615ebfb12076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe258155-602b-4e43-97b8-d7c86c2d8b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edb630a-0a10-4c2b-9d2b-f993da289e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7ab294-83ca-444c-aade-034512af12f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8582bb91-317f-40e6-808d-1b6ab2c54b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a566474c-2694-491b-8b44-d863cb05d2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3319f39f-265d-4822-8a01-2ff99434fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735f3391-a279-45d3-8893-bb9b9ad66948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b43bf-0495-4b4f-83a8-7e5feb8aebb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2c0ff6-470f-4a9f-8fc0-4d6328c839f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c22e3e8-31bd-404b-85bc-68be0528bd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdceb062-220e-4473-9061-ecce44fd2747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfa8b1d-5552-4522-85e8-1945bf16859b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4445e87-8864-4fd1-b3e2-56f6c17147d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9dc0f0-180d-4300-9cb8-23468f774735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625b9999-e440-4dc0-9094-f6519f321b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a9ed37-025a-4311-83f3-5b13e60c2144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed0183b-be81-441e-9fb6-af1d26a16e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e495ba-4c95-4d84-a6c2-db3bcba0e1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d66586-2264-468a-8574-ad9486bed7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bfbcde-1f34-4e04-b8d0-c70e2017c1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9022f2-c07b-40e4-a7af-65f7674ed4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5aa1fa5-b084-44cf-8e27-7e24bae30adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f255f1-b83a-4f9a-bdc4-e9be748d459a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02534257-e284-4b19-809c-6daf221fd225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9498b0eb-a478-46df-aedb-8ec8266fe57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f4c6e-6798-40bd-a2be-a3dbd75c6da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7e12e8-5b65-4858-967f-4e1460a6a03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b981c0-17d1-4887-843a-57287c8d3815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c886c894-6686-43cd-804c-3832cbc0ec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f687272f-0bcf-4e0d-969c-66e41da30a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e068c3-25b7-4fb1-b37d-507c41433c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95bb6f8-0744-46f8-90a9-1671715c6353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200bc71c-cd12-421d-a899-65cca8490a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c747bbf-2148-4ec3-97ed-30e65c18112d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ac6153-bbae-4622-804d-520370b88fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208782a5-3efc-45f5-a8ff-071edbc6f04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b24abb-a2b3-444d-882f-06ae05dd564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356bd15a-6112-4338-b2a3-1bb41ad726b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52fb403-1658-4ad3-9aa0-3331479df0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b091589-3770-4037-b3a6-385bafedd7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42975188-36ab-4ed8-8252-f161fd733245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa5deab-8267-4fb2-95c2-c2ee1428e959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2859b3-56b7-405b-846b-0da3a6b796f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2542e4-9685-4c99-b189-66c4afb075bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e439b1-7f01-4777-aff6-0e26ac10f241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61e2f1d-2066-4491-b6a0-275ccd7f37ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8950a22-424c-45a9-9011-889c01e6c806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70942ba5-bc88-4985-9e69-bb8d1b3f20a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672fd266-7f79-48f8-858e-42da8b8c41db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cae9afa-9c0e-4c1a-8f69-a3b9e0746719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c1b8db-581a-426d-999d-340bbfbc8f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe18687-ff6a-4ffa-9512-c92f9cb5013e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e67a21-267e-4145-bc1c-056f987617c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e073813-5484-4395-9446-90ae87c44796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bebb12-726c-43a6-9954-15bdc5267825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a5103c-c832-48b8-9c86-d14be0762866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607635bb-893f-4262-80ac-0432ee0a22ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced7d73b-d094-4d55-905d-e16efacf62b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903e49b0-9530-4c91-8d80-9986b291d807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ef6fe2-9f3a-46d2-8269-33d88bb8122b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d14739-a1c3-4f71-9594-f75811e61c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e63e3b-ea5e-4cb1-a02c-fb980751f7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37baf24-54dd-449f-bbc6-ea6b54a95e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bde50ab-0a68-4ec8-84ba-bf72ebf9657e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c82c13-982e-4a95-9694-f25d82507820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d648375-1669-4f28-abfb-85c73df441aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4fdedb-aa37-4607-bcaf-f59e1ffeb5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b3c692-fbe3-4f21-adf6-a163a872a736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36232c03-028f-4741-8c71-df0c8704719c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792923ee-1a08-4c13-b2dc-cca83e3b39ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ef842-5bca-4ebf-bd7b-8bb3fdaee8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2277e4c7-8a61-4ce0-80be-77a62c1a3f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c380b54e-8c81-4e66-b720-1ed18bc1f7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba94c67-0064-4ede-8ee1-ae8b71f1b7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b5632d-c90e-4f5f-a3c4-7c38c32bffc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d1f4e9-a5fc-46cc-a8bb-ed98f8e80c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a674ff1e-1c70-434f-b6b4-f31ac3515c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5ba4fb-29a4-46c8-94e8-2f34cd604b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de1f68b-ffb5-414a-8cfd-d8c911bcd470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dab68f-abea-44af-ab27-b165cc5b2a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a11af5-2986-4121-a63f-0e8da22060c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cba697-78d1-437a-a6c9-85674296175a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a14a9d9-ac2d-4e46-87b5-0648b0207040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e0f1fe-040b-4655-8035-11c92e545a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca72db8-be58-4dd3-a097-3b2c683cef28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc726fd9-f5cb-4a00-8eb2-1bd9db95eccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6503e9-7365-4532-87d8-0b72ce572e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0501911-1366-4f5f-8791-cd0871e24268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5d0016-3661-41a7-bef3-9337629de096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e90417-9a92-4eea-a208-66795db4a80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d7c06e-6123-4f98-95c6-ca0b9af98abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdb3fa2-1625-407a-b0c8-9701b562e866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752f9f3b-1341-46ed-ade2-2db129a0955f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af32d9b-2df2-412a-b44a-69f95078080f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21fd1a7-8fc4-4cd3-ba85-56a7420c75b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f910d-032d-4c69-bb1d-0f91116fb162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80661f45-3866-468a-a314-caf9f1ca07e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a6f037-5962-45fc-9e1e-9ce172ade45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f7c5d3-d8a9-494d-b6ec-5d45c571c33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18747f6b-3bf0-469b-9a7b-aa0be3564387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3830c9f-2cf5-4f99-aa83-ef794ce07207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c44bdf-10e8-4296-8e4d-73da621b1296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0051a29c-8113-46e7-b975-18a755cff7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52abcea5-52d2-4f02-85cc-4c90812db9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b132e3-07f7-4603-aa6d-4457b758c60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2ada85-84bc-4884-9008-7d667e19510d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e863d5c8-58e5-4639-bc26-b92dc8341935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d024aba-d2f2-413e-bcf9-e5498959b19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7b7b2d-c13a-4588-8749-d8603c755703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79f35a1-9787-4ef3-bd48-f34d93f12d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb2ea9f-f382-4e41-90b1-2c02a2c74264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68eab767-7be9-44c9-b08b-3ea698d63944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5574559c-fdb3-47b0-a60f-47b922a4b358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d9c95-8ea6-453a-b9b3-1c8820941fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33972dc-9d80-4803-9d0d-e61ce7aaf00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5573fc60-58f9-43e6-928d-46db5d53cb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c11837-d200-4ecd-8130-390beac16cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.203']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70686b3-aab3-485d-855d-9d80ae47f29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fec0b7-5f26-4189-9dea-decd2e476176", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77a1c4-dbba-4fcc-b91f-6bacfb268c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22ce465-50f8-408f-9534-46855b30b711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.17.219.92']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b4dd68-5d49-4197-9cbd-4dfb7510c34b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.16.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2e942b-b868-4708-a0dc-d5e09bcc2fdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.29.107']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ee0eeb-ebd1-4e62-b74b-3682c349c958", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.104.218']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06c6daf-6276-4659-902a-4364b50f7da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.22.61']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d083db2c-c9cf-4f82-b382-f34b5fc42024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce70900-cc5c-4a7e-bee8-2d01ce0d3aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.26']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8916918-188e-48f3-9da6-cd3f1d700515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dbc2a7-6e12-45d7-8544-d8fd9f6538a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6ce0c1-899f-4933-ad4d-c61f0b9381a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.77.177.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87cad8f-9bcf-4a73-a4f5-df4283773b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.55.16']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfe3591-65f0-4360-8e78-c0ad1d1bddd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.23.16.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fdef20-65b6-4387-9b07-d066fb429d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da9aca7-722f-42ce-9f35-eaf66de246d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.111']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f0766d-691f-4049-a71f-9786c192618c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b6941-c9f1-402d-b0bb-21ac4c6552c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.33']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630563a5-7c79-4b59-b4c4-adf0c7c7cd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.8.94']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246944bc-9020-40d9-8600-f14471fa0963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.230.136']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b32483e-685b-4d16-94c3-8bbd9e6c429b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba68b70-8313-4538-b984-20d0341a2868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.30']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752301d1-9685-4df4-a5d0-926a11711c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98368ea-9d53-4e27-9029-2cf262e06f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.9.233.149']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf112ec-f3ff-4e75-9168-831403361c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4ff62d-4668-4331-af55-65cd3c5aa73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.238.72']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1723bec-396c-4bc7-aa5b-8194e0c79dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376b4710-ffe6-4b02-9ceb-fcee6213dd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5602d27b-f90d-4bff-a9d4-119640c7cfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.250.241.71']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55807746-901c-4e1c-99c9-6f1165073e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.211.142']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecddbd93-af84-4f06-9cfe-cb15d2a93ca4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.226.199']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12aa895-3b96-438c-8d09-38b7401e8aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.87.231.131']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2457ed-e79e-45e7-b342-1e95f4d9d0a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.125.170.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf963ca-63bc-4484-a6f1-c0e941a081f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.125.170.85']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e51682-019e-47dc-ac11-5b6f2af55fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.127']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637459b0-68e5-4b01-8316-f7773b6a2cba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.146.46']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45627e0-4aa9-41e6-8736-a33e07ceee64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.153.174']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8308ae7f-6a6a-4a17-b7fa-c30735e87d76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.36']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ad18c5-9d7f-40ec-9add-282be3382f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e3b646-6bda-4bfe-ad93-370f419af822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cba00d-eec6-42e1-b5a4-29010433df9d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.6.204']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb72a07-4a27-4c89-950c-d74dc99ea3ba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.93.43.157']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73afa353-d900-4b69-b53f-1dd76af63914", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.26.115.52']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19788476-7754-4eb2-a9c8-d622c55adc83", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.50.166']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f28fcb4-7548-4654-bb1b-56875b4df93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.88.251.176']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d606a31-f1b9-4797-924d-5f10d6fa6fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9702e2-6469-4bdf-9907-ae90b458b3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10174dcc-25fc-48ea-9420-eefc554599e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.30.235']", "pattern_type": "stix", "valid_from": "2026-06-01T00:00:00.000Z", "valid_until": "2026-07-01T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-01-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862e7355-7fd8-4e7a-9c87-b4ea3b70954e", "sighting_of_ref": "indicator--e72f65e6-4627-463b-aa97-8db5b56e29a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361c892c-e307-4918-bbab-4ba0a2ae3353", "sighting_of_ref": "indicator--b82fb0b6-0105-4c5d-841b-3bcd6941b3b2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10ac01f-8b57-4a3f-a29f-9ac304ff455e", "sighting_of_ref": "indicator--929003e6-fa92-41de-89f1-b1755ae20074", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca935f92-77e3-4c27-8e5b-b08ae9694bd5", "sighting_of_ref": "indicator--7a51e495-c348-4bc5-8593-fdd2f3567da1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f0c40-1b04-482d-981a-e9b5b8ab3e0c", "sighting_of_ref": "indicator--259e1a09-c768-4b73-8836-272587dd861d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2566762-8213-433c-95fa-3c625b7ce4f4", "sighting_of_ref": "indicator--b7b4eb62-fa8d-47cc-9587-db77222b0faa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ec769f-5ab2-42b6-acd9-d6052434be36", "sighting_of_ref": "indicator--5225b0fd-60d1-4f91-9428-5dbac1b13471", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69285322-f107-46fd-a899-5591c36beb18", "sighting_of_ref": "indicator--e1d02aca-8fde-4d23-a673-692b1f29143e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57af7c8a-906c-48d7-9648-0b22fbd33841", "sighting_of_ref": "indicator--34c1f096-c561-47aa-bdd1-0bb0b2b9085d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a069a38d-e202-4b66-bc36-54603020e52e", "sighting_of_ref": "indicator--e5287d0c-b63a-48a5-96f7-6cf5aa416fba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7814291-3a80-4cba-b0e2-9fd09ee18738", "sighting_of_ref": "indicator--823e762d-4324-4ff4-b4bc-2f2173a59c8b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f402f304-08bc-4f5a-9903-3665e2e22aae", "sighting_of_ref": "indicator--8a878566-9a58-48d6-b537-c3853ce77934", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a09dd8d-c012-42fa-971e-76a50391a80f", "sighting_of_ref": "indicator--2ff23343-076a-4cfa-b95a-59a87cdd970a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed53b641-2049-4afd-a462-8de71278590a", "sighting_of_ref": "indicator--c66c003f-e8ed-4627-8c5c-c0f9e1f3fa42", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d03b9c-ac1f-49c3-b0df-ad5ec8f2fa40", "sighting_of_ref": "indicator--4708e212-eb52-4aeb-9468-236b4937edb6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffa4e0f-31ac-4f72-870c-b1ecff70dfb1", "sighting_of_ref": "indicator--beae4c11-a55e-4701-8f42-ea5c99fb40e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c9ad4d-df72-4459-b09f-07ba22656c01", "sighting_of_ref": "indicator--4ea78ad6-19d4-4a5a-9afb-a390cb1f58b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb52793d-7690-4363-90cd-52008f8ecc95", "sighting_of_ref": "indicator--42b9d95a-c7ca-4218-bba1-611e68dbb432", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eead06f-9a5e-477b-b16a-7bb521e07eb4", "sighting_of_ref": "indicator--59205f94-09c8-47fa-af82-f85b83d4734b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bc775b-6c71-46cd-9522-6cd23966e011", "sighting_of_ref": "indicator--899745bb-5e52-4658-b47e-b67235e6ba4a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49acaaba-4cbe-49bc-a696-61bcddc571f6", "sighting_of_ref": "indicator--38163117-4ed0-4bc6-b640-476cc3cca782", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ed94d4-ffbc-4c7b-8784-fbf9dee90d8c", "sighting_of_ref": "indicator--515b4c3c-4981-4e29-91e1-06c96d14c293", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274109ff-c866-4efb-91fd-975db6220b8f", "sighting_of_ref": "indicator--120b215d-b70f-49a1-b494-7488632499ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb64b4a1-1e4d-4bf2-9555-214cf7817ef9", "sighting_of_ref": "indicator--e8618635-2b77-456a-ae7a-492e55c070a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd18fb-fcc1-4629-93ba-98f449672ed6", "sighting_of_ref": "indicator--f7e9697e-5366-4946-86e9-ac88b4cf4d3f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc95bc3-eb03-4a4e-9ea0-481f1d104dbe", "sighting_of_ref": "indicator--e2f423f8-a0a9-4b29-9612-4906ae0eb017", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa760087-5617-440a-9607-404b4b220ce3", "sighting_of_ref": "indicator--1fed156a-e933-4b5c-8ff8-ec4d10a9a504", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf64029-5c0d-4442-8e74-32ded3749ea5", "sighting_of_ref": "indicator--0c632473-3dfc-4871-b1ba-9f989920c755", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecb1cce-0781-4457-b275-409852515bba", "sighting_of_ref": "indicator--41e6e181-bd0d-4e26-ab5b-f4b71031c1e7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffde1d99-6b43-4781-a852-137da8cd34e8", "sighting_of_ref": "indicator--a8238fd2-7a0d-4dfd-83e6-29e8e15fc2b4", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77008adf-52d8-47dd-9e21-e10f1ad438f0", "sighting_of_ref": "indicator--0bbd00c7-d274-45e6-84c6-ef7127dad8ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc334a9-9f82-4727-9d11-770467474019", "sighting_of_ref": "indicator--9d2fea37-4505-455b-a822-0647a6555899", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9049a80-228f-4f4d-a4c0-99cef27711bd", "sighting_of_ref": "indicator--d0dc3081-0342-46c4-9eed-444cf695d309", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252078c-a01b-4ea6-aa47-24d4b0b9fc23", "sighting_of_ref": "indicator--ccdc89f9-8106-4874-a5ef-b1a25e133696", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43744b97-7f76-41c7-bf97-7088e177bcf2", "sighting_of_ref": "indicator--2a607f31-5374-4ef7-a02b-85fdf6bfba95", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f199a2a4-57a1-459a-84eb-ea673a0df724", "sighting_of_ref": "indicator--9adc43d5-09d8-4054-bd2f-8c2f81cad730", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da57f472-72e5-4551-a28c-8471bbedf458", "sighting_of_ref": "indicator--e01e311e-7cc2-498c-a40a-8fb64c3133a3", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12ba758-04c8-4295-b255-a2cc798ac1bd", "sighting_of_ref": "indicator--a5e797d1-0e31-4b9b-8a11-ffad8ac641e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149102b4-a161-4e25-a127-d49692f674dc", "sighting_of_ref": "indicator--e880d546-fca8-465b-a1ab-2a2fa0518374", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f8b27a-8cc7-4bb5-afb0-8c9350dbe49b", "sighting_of_ref": "indicator--e0a09088-b473-410d-bda3-8356e10ad436", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c3ad6b-0d00-4553-8c6d-0c8ebef28330", "sighting_of_ref": "indicator--18d09c62-e06c-4cda-bd8b-f34db5da0566", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fea957-d896-4952-9c07-0925b1c08acb", "sighting_of_ref": "indicator--efb31c0f-04e3-4907-afb3-ffd0f2d31643", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0a47d3-c80e-4074-aed0-edaf540f2c4c", "sighting_of_ref": "indicator--861fa62b-6309-4e21-a754-32095c382f38", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c415598-a2f0-4ec9-ad43-1384faf85d8b", "sighting_of_ref": "indicator--08baf522-4e99-412f-9015-20f7472fd8e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a1040a-1307-4a91-a6aa-67675bcb7e3d", "sighting_of_ref": "indicator--6d90fd1f-b585-4818-a672-cb7317af5a17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a19b3e-9c28-4e3a-80f2-b8c7146fe9a3", "sighting_of_ref": "indicator--3a730bf9-cb26-41b7-8b45-7d3f1ba62079", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621fe595-2cac-40ea-8e0f-2ccb29853fca", "sighting_of_ref": "indicator--6e3fbe82-6a1d-41b7-879b-39e838dc4f73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e70ad9-ec49-4e29-be8d-875e8ad1b1da", "sighting_of_ref": "indicator--3cf52973-2e6a-4e5d-a022-5638a6878481", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f00561-00b2-433c-ad4d-14da97f9dcd1", "sighting_of_ref": "indicator--aa1d2e27-e9d8-4562-9b65-8886aa0bd07b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e30f0f-6f54-4c36-8d96-abe7d7741b51", "sighting_of_ref": "indicator--673c64e5-509d-4970-a8b0-809183344ca5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9effa2d3-4787-48cd-85ac-81f0e920bd3c", "sighting_of_ref": "indicator--084d5431-adf8-44d9-a5f7-9e10095aea87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90425660-c161-42ea-bf27-a4ef633e6018", "sighting_of_ref": "indicator--d5f9bacc-1bda-4010-90d0-f89bb13d2786", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8c478a-fbfe-4ad7-a853-12de64962d29", "sighting_of_ref": "indicator--49038e52-a5ef-4984-9307-5c860637bef0", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbfba2c-7a40-48ec-9beb-ff47e4e4be22", "sighting_of_ref": "indicator--d1300012-43b3-477a-aa65-785f85bbd79d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37caa616-e583-4682-b782-134fe6365f49", "sighting_of_ref": "indicator--8de2a6d1-8fb4-410b-86a3-0cf48a17b7ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f121ed18-29e9-48d2-b2dd-367f2f6909fe", "sighting_of_ref": "indicator--1f73509e-7c82-414b-867a-7ccbfcd9f26a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d1717e-b573-4a95-8b23-d270405b2270", "sighting_of_ref": "indicator--a4a538dc-5614-49cf-8bd0-6fa77a40e6d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e24fd55-e01c-4c53-a8dc-4a2b9e4cbb94", "sighting_of_ref": "indicator--81ef07bc-daa0-486d-ab77-0f339f54f267", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c684e562-1198-459d-b3b2-851ecc8f23f1", "sighting_of_ref": "indicator--3e5efa46-7643-4f4e-b230-ef2addf51d9d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876147d0-e5cc-439a-82ae-9e47bd878d19", "sighting_of_ref": "indicator--29478389-fe8f-47a6-a0e6-8b19215f5f2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda79c1a-c07a-47b1-8c29-a9e1c265013a", "sighting_of_ref": "indicator--11aded62-0b3b-4e5e-8c78-3289c8245610", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02001360-ffae-4c9e-b1a2-7fc18b468073", "sighting_of_ref": "indicator--7f2f37a5-7ebb-4b1f-87e0-9a63056ba7af", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ce2a19-7f7f-47fd-9887-3f86cbb5898b", "sighting_of_ref": "indicator--e0a05593-80b5-4448-9dcb-0c051a0caab5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4397ee5-8ccd-404c-bfcd-1504650e4572", "sighting_of_ref": "indicator--6ba0a098-143f-40b1-9515-6b55a9ef4c8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee37ed9-c150-45a0-8faa-8dc0ef4b2c49", "sighting_of_ref": "indicator--ada62457-09e6-41fe-bf28-52f9a811b696", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79a229-a05a-49fa-a2df-209e79d49286", "sighting_of_ref": "indicator--ccb5cc14-358a-4e3a-8348-5eb03db13a8e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9663b28-b5ce-4066-b769-a59d126bfb44", "sighting_of_ref": "indicator--a4a542dd-033c-4599-9584-c6fc2b20b1d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217afcee-4883-48e7-89b0-e9f6dbc011fc", "sighting_of_ref": "indicator--6468adcf-0286-4f1d-8b05-1d7d040d976d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec069750-2ed2-4a8e-aec6-c3effdd14d39", "sighting_of_ref": "indicator--8a1839be-baaf-4e46-a6e3-0cffb640ae3b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f4a587-c32b-477c-b410-8380790c3eb3", "sighting_of_ref": "indicator--6f4b6fae-af99-4260-95b4-d394e0160f1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6479c7-9c61-46ca-b8bd-a4ae2fd833ff", "sighting_of_ref": "indicator--1db48c66-7c5f-4c46-999e-d7f9f0303f13", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2a825d-7303-4b81-9e87-daf8a9887991", "sighting_of_ref": "indicator--b78664ed-1ab5-429c-8e8b-47d29cc5d52e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d5f438-dea0-4761-b75c-c5a9e977a492", "sighting_of_ref": "indicator--f9637114-f60f-4172-a04f-b053164d5490", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fb3963-9be7-4c47-916d-7338fbd0cb91", "sighting_of_ref": "indicator--9aa493c9-50b2-405a-bd4f-217a4d5d16b9", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df0f339-376e-491e-8377-773991283c68", "sighting_of_ref": "indicator--2d3ee0a4-c321-446c-b387-55f18e0cf9e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f9b50c-38d9-4eca-ac83-5c454439c803", "sighting_of_ref": "indicator--ca2d2a21-e7aa-4bad-bc48-7a4010211c66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fe1a91-9f6a-4d78-b699-9a8ac39cb29e", "sighting_of_ref": "indicator--cbea0563-6627-4aa6-83e4-e481f6a90d25", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eb8086-2fd0-4c2e-913a-9bb6a7edf195", "sighting_of_ref": "indicator--9c881834-2bf1-4aa9-ba4c-f88949c2544c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5539e9-bbe4-4183-9bc5-8de9b1fb37ab", "sighting_of_ref": "indicator--c7f7858d-1a78-4618-835b-542cb1b390b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0c1f4a-b07d-4612-bc1a-cc293a0ef3aa", "sighting_of_ref": "indicator--ad356a58-b9a6-409f-837c-c576c2a310bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ad6a90-5b74-4531-a7de-744441c84ffc", "sighting_of_ref": "indicator--bb779fa0-85e9-4756-bfc3-25e98c6e98f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c86d85-53a8-4111-b887-854a9cb24756", "sighting_of_ref": "indicator--875fb2ee-39de-476c-8783-75a23ed4d6c7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291bb257-6a7a-42ab-a4e0-6e1145786561", "sighting_of_ref": "indicator--b2539d38-a913-492d-8302-5b923c81196a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabca28d-e316-4ecb-99a5-fb8f8d2ca865", "sighting_of_ref": "indicator--022b09eb-0812-4de8-835f-a1f91b7464c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd242fd6-992e-4275-b1fe-2a9760cd1355", "sighting_of_ref": "indicator--5e6a24c3-9494-4285-aec2-68607b2386f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28544f35-b592-4ddc-aeea-1576d02cc299", "sighting_of_ref": "indicator--434864d7-157a-4751-b6a3-1f6a16913725", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8642216-3453-48e2-9d69-f12460bdfc9a", "sighting_of_ref": "indicator--4887f2e1-092f-48f0-971f-4950f8cdb92f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c67d1b-2cf1-4a2b-a485-8fd124411bbb", "sighting_of_ref": "indicator--9be62b11-f3cc-40ec-ba4b-01a431f3a88c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3286b00a-d47f-4dd1-839e-c648aa3127eb", "sighting_of_ref": "indicator--113f0407-3427-4b3d-a7b4-d5857b83121d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce16cc4d-9a4e-46b0-a459-3b56deae834d", "sighting_of_ref": "indicator--8f97deb5-e69d-4b8c-940e-bafe1acbd1f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d35097-aa9e-40f7-ab33-d2d5f3a1a469", "sighting_of_ref": "indicator--103004ee-233a-4fbe-967f-7bd7291b12cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373bae04-bc63-4f7e-aefa-c713474424c9", "sighting_of_ref": "indicator--cb338f61-df05-4d10-8e29-729df56ff082", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d514404-8803-4886-be34-55a39128bdd8", "sighting_of_ref": "indicator--133b070a-62a8-4bff-b7ad-69c4daaacf51", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddb3f66-2a13-47cb-b001-61699160663c", "sighting_of_ref": "indicator--f594c069-a1d6-450c-8ff2-213f9bd021cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6766f30f-bdf0-481d-8970-9df54ce7e83f", "sighting_of_ref": "indicator--a4d91dad-2251-458e-b776-03fab40498ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6340e40-78b8-4206-8f68-386734e62598", "sighting_of_ref": "indicator--a26d5cbf-b982-4ccd-8397-ca28155fc98f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff5077d-0645-40fe-a538-5363f036bd14", "sighting_of_ref": "indicator--e1fe9446-38bb-414d-84c4-91bf09cb5a05", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fe0d5e-b1d2-4b0d-a4c8-71f67f933784", "sighting_of_ref": "indicator--2f2012dd-733e-42ad-a6fd-12444c800349", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777c11d3-a589-4c24-b4d8-3906c09a003e", "sighting_of_ref": "indicator--34f3719b-d394-4dff-bb54-b2b0761adaed", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c5b3a8-68ec-45bc-8f15-0790684b6639", "sighting_of_ref": "indicator--6de3a36d-7db9-4208-80e7-6fa7eb74750a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe4b9ae-819e-4c2b-9121-6c320f69a11f", "sighting_of_ref": "indicator--1f25b571-2e2d-4898-b094-a5c26d254fe7", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67e0909-8020-46e3-8ab9-87b80c099b12", "sighting_of_ref": "indicator--ae7c96df-9720-4cb7-9307-96642e2dd506", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a2e2c3-4bb2-4193-b4ed-d4fc35988fd3", "sighting_of_ref": "indicator--4d3eeb3c-2e20-43f2-8f8b-d4099314c100", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f4da73-72e8-47b8-ba93-d3a092acb25f", "sighting_of_ref": "indicator--be4088e1-a499-4ae8-a2bd-83ea237a5d0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d60c95-b6fb-414c-9078-a5d4cc9e34aa", "sighting_of_ref": "indicator--76ccd024-1037-4421-95ed-34489092b7b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aab317-483e-4df5-8716-cb7cd6614698", "sighting_of_ref": "indicator--b8e16b42-7c63-4313-b8a5-ed381caaeb9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188d50a3-9f56-4c07-9715-5a985d56aeb6", "sighting_of_ref": "indicator--4ef8a903-7d29-4916-914d-fbd0d279ea66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e904c274-7ad6-4671-923e-fbe9a885eaae", "sighting_of_ref": "indicator--e85a38c3-c72c-4275-999b-27e6f97d288b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9774afea-80a2-4ce4-bd92-38ef46c60f74", "sighting_of_ref": "indicator--282f35b1-9a98-4574-8949-f8965522184f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de9f1e0-1b22-4be9-bbd8-06aaae0de6e3", "sighting_of_ref": "indicator--23e7b83b-4ae3-414e-814d-2fa264d02be6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee50e03-3a92-4f1a-9541-9c7609da9ace", "sighting_of_ref": "indicator--b12d1410-8909-4b77-9054-3c96f910d909", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25133ff2-9ce9-4529-870a-e86d36baaa8e", "sighting_of_ref": "indicator--87aaf816-0a25-43fb-81b6-cf17bb583d7f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72edd2cb-fdac-47ab-8af0-5b2cdde1f669", "sighting_of_ref": "indicator--7f358d07-8c18-4b19-aa62-64334ec19c27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d07586-9e45-4156-90e7-7beed027c706", "sighting_of_ref": "indicator--a24a207a-571b-4fd1-8505-a7709945cfc4", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9beb1c8-001e-48a9-be9a-55844a9a0cf6", "sighting_of_ref": "indicator--c095d904-f030-4e92-9d4d-c4e848dc91de", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0d7f9f-3142-41b1-963d-e70ac5219088", "sighting_of_ref": "indicator--800ee1cd-a7d5-402d-bf6b-539e3cc45d09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f422a5-8d26-4f6d-86e6-0af4161c469c", "sighting_of_ref": "indicator--60107e09-9bf3-4b30-979a-83456dec6a6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b2dbd3-7564-43e5-87a8-cf9f10708fe9", "sighting_of_ref": "indicator--9fe1c6ef-0513-48aa-bff2-3a58602e0687", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227207bb-29dc-465f-a409-8cd0036a4e43", "sighting_of_ref": "indicator--d5fd726c-09eb-4f7c-b755-8f4586084f8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23929060-3545-4ef4-8db0-65335fde2867", "sighting_of_ref": "indicator--5519fabe-b9e5-444f-b3f7-8dda0880de80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78009088-b461-451b-a3ea-90dcee1a6e8a", "sighting_of_ref": "indicator--0bb74af9-fc3a-47cc-af32-fa0294bb9071", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8383c9-57c4-4a19-a152-bad40c13bbd7", "sighting_of_ref": "indicator--e5841f92-a428-4b06-8af3-1441d9437091", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e175e3-3a6c-4d80-9c0f-647009a58fea", "sighting_of_ref": "indicator--4a8530a4-ede9-4c1c-9abf-079ac1c7142a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb34f35-f6dd-4b47-a13b-473c20293c7c", "sighting_of_ref": "indicator--362b2dd9-1a82-4a00-bd03-a2aa8af15f99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e5fadb-c6e7-45b4-b6d3-25fda2d0d578", "sighting_of_ref": "indicator--9409bcd6-ee7d-47d1-970b-ee88a68e4665", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6badde-3ce1-4070-969b-bfa7304f27e4", "sighting_of_ref": "indicator--246c38e6-b5b3-4804-ab4a-a0ca979f9be3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40377698-6b48-4a7b-9fcd-04e29d7f76bd", "sighting_of_ref": "indicator--46187cdc-a283-4c58-a7f0-e363a07e46f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e2f298-13a6-4710-b444-bbd33545ff8d", "sighting_of_ref": "indicator--c89a6c56-0868-4e73-9784-ba94d2c60287", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb91b44a-33be-4ec5-86b3-28079a26974c", "sighting_of_ref": "indicator--4e5a01c0-cc47-41ba-a602-9297cae28e53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54212c6-1000-465b-a46b-bbfd7e7957e6", "sighting_of_ref": "indicator--5144a852-bf32-4ed9-93d7-37c7313af598", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8c8dec-d455-4a5f-a072-65c49cf796e9", "sighting_of_ref": "indicator--ae94dc1e-9e93-4bae-8ffe-586a92ea510c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8facaab9-2fac-495a-85a9-304d180e9bff", "sighting_of_ref": "indicator--8f2abf7a-99aa-4599-9983-8f067f3a593f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da60761a-0154-4dcc-a701-fd1baa0bab7a", "sighting_of_ref": "indicator--4365c1f2-566e-4a74-9ae6-37ea7517711e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492b0216-db4a-4fef-9d3a-7722027e9dbd", "sighting_of_ref": "indicator--1e0dee5a-35ea-4e76-acc1-aa1510ed63fe", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6411e804-5211-4349-b8af-ff5d00fe7502", "sighting_of_ref": "indicator--1632f37e-48f6-4cbb-87e3-6fe0a1105dcc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f52ecb-9317-4af3-a22d-6e8fbcc12fc5", "sighting_of_ref": "indicator--2c0de801-c1e7-4ae2-9abd-18dc6e567d3d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe9051-c9ea-473e-817b-e3bb18fe8a99", "sighting_of_ref": "indicator--970859cd-c08e-4545-accd-de8a06364fb2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05590124-1b67-4a5a-80be-5fb546309ed6", "sighting_of_ref": "indicator--d3ccdabe-5d44-47f7-b952-124b09823761", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95a37ac-c352-40b1-8410-6382bdd8ad21", "sighting_of_ref": "indicator--2442ea87-275e-4382-8dd9-30384aa43adb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edfe66c-6e1d-4202-8256-5ec2edbb01d7", "sighting_of_ref": "indicator--6bf98466-6b9a-4ec8-9e3e-be05cd0ab72e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf38801-e5d3-4a78-abb4-0217cb28456d", "sighting_of_ref": "indicator--c9f743db-f183-4cd7-904d-f1caef89c931", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd21f29b-3401-4e6e-af79-66b99e0b8727", "sighting_of_ref": "indicator--92c56d5c-e2a6-4a8e-86a8-be55f38f64be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4678bb-07b3-4c5d-8655-1cfee4285698", "sighting_of_ref": "indicator--5262b0bd-0170-42fb-8009-0987f0e36d82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e814cd2-8133-45c1-8140-4d0e3a3f65a6", "sighting_of_ref": "indicator--87166938-aa41-466f-8473-02cce22eb95e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb1e055-78a2-4010-aee5-a2d55f3d1cd1", "sighting_of_ref": "indicator--a05c7e2a-9f67-44e2-8d0d-fbfcd8cb5820", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fce761-5245-46b5-b9e7-e863f700f87e", "sighting_of_ref": "indicator--03393a12-1a1d-496c-a6cb-c810c0403eef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefd14ff-2531-4246-92d9-b7c095789d5c", "sighting_of_ref": "indicator--aab5dd44-14a6-4c3c-b87c-fc315b74bfbe", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c184f6-93ec-4b8e-a19d-867954ac2865", "sighting_of_ref": "indicator--eda12d41-8097-49f8-b69f-84b8ef94994c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685bdcb7-5036-4334-bccc-32f086551341", "sighting_of_ref": "indicator--878052cd-6e15-41c0-bc90-40042641eeec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c3dfa-5da2-4258-81df-e3b61b86fadb", "sighting_of_ref": "indicator--3fb880dc-19d8-4b84-8a93-6b872b019a1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20979b8-5693-44c1-9bfe-0096990ee64b", "sighting_of_ref": "indicator--1648471d-ee4b-46f0-9ff7-35dedbce795b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18f9736-fe3f-4539-9190-68efba2b99ee", "sighting_of_ref": "indicator--2cb2f63f-3639-4041-aaa7-eefdbe342f9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a5cbc9-129f-4c09-b053-66b7c2340311", "sighting_of_ref": "indicator--d75bc446-da31-481e-87c3-b21580bdc49d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39999556-57b6-4175-97e7-46258d775d1e", "sighting_of_ref": "indicator--abff129c-6a44-4f1e-a23b-dbf379b8c491", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a716b5a-f6a7-4070-a51e-9098bf498eef", "sighting_of_ref": "indicator--279f2698-6195-4851-bfc2-ec67ec3dc0a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dbdf79-328a-4c9c-b87c-95ea648595fb", "sighting_of_ref": "indicator--aea78921-8cb2-4331-9f13-88503dc46a78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8bfbee-5061-41c9-b2f4-028b6af6ec6c", "sighting_of_ref": "indicator--233dade3-2d12-4532-911e-6ff19a34e534", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abd62c6-6f67-4dde-8c80-6580d8897ceb", "sighting_of_ref": "indicator--9bd88bee-a82b-4d45-b601-693758ca22d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2991f1d-7132-40ff-ad6c-3da796197053", "sighting_of_ref": "indicator--f01c3789-e6ae-4ab8-b088-ac4fd0079693", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed94200-be14-4d81-b653-19823374d636", "sighting_of_ref": "indicator--4bceac5a-f64e-4729-a11d-b1eae8a50ca0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68c1492-905a-4243-b4da-3c626d18d760", "sighting_of_ref": "indicator--65353cd9-9d09-4c1c-accc-bc599c84cfeb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318e84f1-a4ed-4504-a970-1543f08d6703", "sighting_of_ref": "indicator--832479e8-5729-4396-88ac-f3b9e9ef06e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a78c1d-14a4-4f12-9eaa-f738d501ea21", "sighting_of_ref": "indicator--c112efa3-4098-4a0e-92f5-ae852a2bae9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7ec59f-7e8f-428a-abac-02f2e7c29b94", "sighting_of_ref": "indicator--1073767d-1f75-49c5-884c-c8170911df61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e82a9ac-52fb-4575-8df9-0adc802c74ab", "sighting_of_ref": "indicator--b47ac41f-728e-44cd-bcfe-02106a70486c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c393c23-f2bc-43e1-9466-dab1c3a5d06b", "sighting_of_ref": "indicator--ad0d459f-997f-4a1f-8785-1f48cd0e9cd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96f342c-9554-4298-b612-5719b07af091", "sighting_of_ref": "indicator--8a23ec41-7f4d-48e4-b12f-330aa66de753", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fd8561-2263-4ecf-b1ab-0abe3d77c4d7", "sighting_of_ref": "indicator--de0a9c11-4385-4039-b642-44be5018d3f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d9e90-7d7c-4030-8a27-84b5c177791a", "sighting_of_ref": "indicator--d72eff00-930f-4d67-9ea8-a2d22a681123", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c516f-1368-4ef5-a8f1-157ab7bbaef9", "sighting_of_ref": "indicator--2a2d2933-a7fe-4b0b-b1be-3039facc6621", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe830f-abc1-47a0-9066-42232a432a36", "sighting_of_ref": "indicator--bfd509fd-3be6-4b5b-81d9-3fb300abc954", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def05fbc-4940-440e-b575-215f5077be36", "sighting_of_ref": "indicator--19b59f6a-a4fb-4460-8352-abad0f051459", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12ea0be-e5ff-42f7-bff8-dc17e818d1be", "sighting_of_ref": "indicator--a9c35d49-7c75-4c71-b40f-8eb50c6d384c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a2257-c609-4fbb-b6b9-90d5b09aa699", "sighting_of_ref": "indicator--880cf560-7ef9-43ff-925f-e4e08e244934", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f618a6-3301-4489-8a19-51a84254d1db", "sighting_of_ref": "indicator--9da0c8bb-8d19-48f5-b765-4419e399bf88", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f63665f-13f6-490b-9c4d-0cbfdd0274c8", "sighting_of_ref": "indicator--186ab05a-4f5d-48d1-8ec8-03908aa15a04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaeaa3d-9c3e-4064-b54b-373384cf0e8c", "sighting_of_ref": "indicator--303c6af9-3c2b-4ca6-8b9c-57f6523553a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6f4b69-75bd-4239-a849-2f70024f2afe", "sighting_of_ref": "indicator--fc95965b-ad96-492b-9227-234444c81a53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716e53a5-8d7c-4746-a3f6-2d926916d1f6", "sighting_of_ref": "indicator--1ae17bd3-7df2-4305-9fdc-0e88888d42d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a602454-14b0-4f19-b42e-e8a59670b8b2", "sighting_of_ref": "indicator--19a31f3e-5688-402d-acba-8a93bef1739b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec94a07c-7ef4-4578-a53d-a2a3433a688a", "sighting_of_ref": "indicator--93e2e454-2d3d-45fd-a032-7a6e951e98e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d9c72a-5b21-4160-8467-fa5054acf827", "sighting_of_ref": "indicator--dac664bf-34f5-4c48-8fd5-587cf8a30761", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c458e0-8475-4722-b853-ce5b78bf9226", "sighting_of_ref": "indicator--c63d926e-fcef-4795-b221-8e8b6779b305", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa27555-5809-43de-ae1b-9a3d0613089b", "sighting_of_ref": "indicator--de7cd4dd-05d0-45c0-b31a-86dc916b40d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892e786f-02f5-4941-94e1-aae60bc183e4", "sighting_of_ref": "indicator--87905804-6156-4559-bad0-7b6ce81349dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490bc381-5bac-4560-a596-16583aad05a3", "sighting_of_ref": "indicator--c343846f-4ad1-49f4-9a4d-364039b189cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b1f477-8e97-4db2-8ad2-84fbacfb9b9d", "sighting_of_ref": "indicator--e9d343aa-6a72-4747-a9ea-73209f658053", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8679823-968d-4c8c-a1b2-d3799fdc9303", "sighting_of_ref": "indicator--fa227f83-b1f4-47e4-9947-a00da8ea58b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4273ab2f-bf45-4dee-a312-75b2bbad7e6d", "sighting_of_ref": "indicator--0133f1a4-44ee-4ffb-a97c-12c097e714cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3598f1f-4cb2-46ac-8f03-30282990fdfa", "sighting_of_ref": "indicator--766bf573-bc30-47f5-a84f-821645099c34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0374940a-9fae-4153-b9e8-db72f8d88e25", "sighting_of_ref": "indicator--f5711fd7-6584-4c1f-8847-4dfc355e0cbf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d5b8d8-e630-45a3-93fd-87c9d4d9c851", "sighting_of_ref": "indicator--48d7eb14-15e2-466e-b73b-901ec55615df", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19965fe1-8935-41ba-a6f8-964917e13abf", "sighting_of_ref": "indicator--ab8aa376-e0ab-4318-ab9d-9f1da38bec83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a2430e-8af7-49a3-aed8-d1e6b8388a84", "sighting_of_ref": "indicator--6b981a8e-1a2a-4995-9737-430bc9a6ee6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f17d968-21a2-42a8-ab83-ee40081c8400", "sighting_of_ref": "indicator--02a1bcdb-2fc9-452a-b0ff-8e3edec79b06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3064f34e-fc8b-4d2f-a5b7-94a8c4e4af6c", "sighting_of_ref": "indicator--be2e3fe2-2836-480c-aa03-37228b0a2d39", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42c7595-eee8-4fff-917a-7d8571a55ad9", "sighting_of_ref": "indicator--0aff99df-af19-4927-ae55-3b91fe322aaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89413df0-df0d-4059-a366-702103ee0e16", "sighting_of_ref": "indicator--54c37f12-a8c8-4a19-bb0b-4e5d6839f19e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9cf5a2-39c1-4ce8-98b8-839bc678c56f", "sighting_of_ref": "indicator--45727778-a86e-4b26-9674-07a2f2a882b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeefd331-7ae0-4409-971d-bb9dd6235f98", "sighting_of_ref": "indicator--b452b7e3-cba4-4d3d-af22-2bcf74bb6340", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2220b8-417c-4dc5-987e-ebd67b86a753", "sighting_of_ref": "indicator--093f2161-635e-4268-8322-be451598ffc2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072ad787-505c-40e2-a8a7-310804f33059", "sighting_of_ref": "indicator--03885840-3188-4f2b-a3ea-2dd039fb6f10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e01757-19ad-4e1f-b488-f4ed66082b94", "sighting_of_ref": "indicator--14efb142-52de-4e79-aead-341bce6c265f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea53b33-a9fc-4029-85d0-3025c8149643", "sighting_of_ref": "indicator--f2ddaa40-1a27-448b-8ae1-7e09abda474b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a842ecc7-9a5c-40de-b895-51e8994cdaeb", "sighting_of_ref": "indicator--f6783bea-a58d-4ea1-9cae-9cc04129ca2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049640c8-b63c-4812-a429-47f453488061", "sighting_of_ref": "indicator--975b8a62-2392-4d23-8837-993420a5f280", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd67792a-1f76-4028-8d6d-df4a3dbc258a", "sighting_of_ref": "indicator--6142403f-cc04-45b1-8db2-496815f9e405", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6464eb43-373d-470e-b3da-e1f06c418d38", "sighting_of_ref": "indicator--b1e24ee4-780a-47d0-928a-8df61c3ffb46", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8ff953-08aa-4aa1-a342-5cb6a70d4d3c", "sighting_of_ref": "indicator--04f9137f-ef0b-45b3-be3a-383aae2b02a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c959f582-a277-4bdd-89d8-fce3a294a6ce", "sighting_of_ref": "indicator--3fa261c3-ea80-4bd4-83fd-e6d01c327094", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0d0228-73b4-4552-a2a3-028e30372602", "sighting_of_ref": "indicator--d93974b1-febc-4728-80b9-c625aab71801", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736411d1-44d3-46d4-ae58-659c8a46c886", "sighting_of_ref": "indicator--5a9689c7-e67a-461b-bb7c-4feb027f5263", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67083a9c-89f8-45cc-8330-7474db2eede0", "sighting_of_ref": "indicator--fd882547-1064-4cd4-a32f-1cdd4387703d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf07407-ae60-4157-8d9d-8becb23a3efd", "sighting_of_ref": "indicator--c92aefb3-aa5b-431d-aa3a-40f9fcb83412", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd9f559-9792-489d-82eb-dbb645115c7d", "sighting_of_ref": "indicator--13181200-7c6f-4b78-b256-0399dd370047", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc37a7d-ef80-49df-b80d-3683a3247c56", "sighting_of_ref": "indicator--a00b205b-e307-4d8f-972b-9fd703af00b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20318444-e69e-4422-9c83-72d417a335b9", "sighting_of_ref": "indicator--d21ea58a-3e05-4d60-a262-2859539fd1cb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f5bc21-db74-4320-903e-7eb8a71b4ee9", "sighting_of_ref": "indicator--9c46131a-ab7b-4fa2-ab9a-56c70de9df4e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b71cc0-826c-4132-8273-9b4572393530", "sighting_of_ref": "indicator--9c46131a-ab7b-4fa2-ab9a-56c70de9df4e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915d1c75-bd5d-4b37-822e-e44da6748eba", "sighting_of_ref": "indicator--3f8a28b7-35c0-4b9f-a2ff-211dff8cbf09", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7692c5b-4fcd-423a-8d60-7daee4547f7d", "sighting_of_ref": "indicator--3f8a28b7-35c0-4b9f-a2ff-211dff8cbf09", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7655ca-8380-457c-96a7-c9efe0d30ea1", "sighting_of_ref": "indicator--022843bd-07eb-48d8-bd47-4cfe3448b23a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd5a72-b57e-4f3a-a4d0-4d8d28b92b8e", "sighting_of_ref": "indicator--022843bd-07eb-48d8-bd47-4cfe3448b23a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e088192a-80d2-44a7-8033-c2f9933ab58c", "sighting_of_ref": "indicator--b82733b8-2cc2-474b-8e2a-94980e980345", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b00698f-b84b-4f73-b2c5-1d2d70675df9", "sighting_of_ref": "indicator--b82733b8-2cc2-474b-8e2a-94980e980345", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f974a626-4faa-4f1a-9016-e9fb812d3368", "sighting_of_ref": "indicator--677133d1-bff9-49fe-ba18-43f868c2a07a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd535ba-d2d7-40d3-b722-472521b17cf6", "sighting_of_ref": "indicator--677133d1-bff9-49fe-ba18-43f868c2a07a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155d6e23-bd21-4828-9aeb-4475eced0fd9", "sighting_of_ref": "indicator--111fefec-0c34-4713-a8da-227d5f77e283", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991b1d61-4d8f-4223-b904-8ed2691510b8", "sighting_of_ref": "indicator--111fefec-0c34-4713-a8da-227d5f77e283", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214b0769-fe26-4ea2-8b1b-90bd3fb98b07", "sighting_of_ref": "indicator--eba35348-d53a-40be-978e-544f1fdc30dc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53686c9c-c401-46bc-8f14-32ff44445614", "sighting_of_ref": "indicator--eba35348-d53a-40be-978e-544f1fdc30dc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575717e9-4eee-4774-ab8d-582d8761f36f", "sighting_of_ref": "indicator--c3084299-021f-40ac-a870-1c6059a8d2db", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daec431-646f-4799-8d70-5f7dde493caf", "sighting_of_ref": "indicator--c3084299-021f-40ac-a870-1c6059a8d2db", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ef215c-8d28-416b-9c6d-c36080d2faa2", "sighting_of_ref": "indicator--b1d22fb8-ecbc-42d2-ac6d-813757ccb97a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8586053-b24e-4569-a435-b99c2092540d", "sighting_of_ref": "indicator--b1d22fb8-ecbc-42d2-ac6d-813757ccb97a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfee222b-79a9-446d-a19c-56fe0e4a9ceb", "sighting_of_ref": "indicator--d95f51f1-c653-4ab9-93d6-9f664e1ba776", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b905dd-4ab0-44e0-8d12-ca5929d41432", "sighting_of_ref": "indicator--d95f51f1-c653-4ab9-93d6-9f664e1ba776", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fab4e85-d973-4777-a4e5-e970a7af044d", "sighting_of_ref": "indicator--9b89c582-6c04-4886-9427-867911153024", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d9c22-bd21-41f9-a919-27da3b2920cd", "sighting_of_ref": "indicator--9b89c582-6c04-4886-9427-867911153024", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73c368d-e59c-4adc-a983-1950c54eb4ad", "sighting_of_ref": "indicator--64ecb16b-fcb6-42ef-98c4-3dc9c4a6936e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6222b17-b6e7-4dcd-9ea0-4d2fb782a826", "sighting_of_ref": "indicator--64ecb16b-fcb6-42ef-98c4-3dc9c4a6936e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceca3b2-4199-43a2-b5e8-6ea5a8731af9", "sighting_of_ref": "indicator--64ecb16b-fcb6-42ef-98c4-3dc9c4a6936e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc471d-0980-4fcf-a15a-6218830b58e2", "sighting_of_ref": "indicator--fff7dc5d-6893-4bcd-9160-c364b70d62b2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e6143e-7371-4a7e-9a14-e88a68c71011", "sighting_of_ref": "indicator--fff7dc5d-6893-4bcd-9160-c364b70d62b2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91eae42a-1784-4ce5-a1e8-ccd633510ebe", "sighting_of_ref": "indicator--c40ee71b-9088-4e77-9ca0-cf91a49081df", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11233ff1-1499-4e7c-84ad-c2b5189c2ca5", "sighting_of_ref": "indicator--30b73323-32d1-4de0-b7b6-a239c2589240", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b77ba5-148b-44d3-a5c9-c783095e7ea3", "sighting_of_ref": "indicator--a50c3477-9d62-4b22-a03a-6be28333f41a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3999ed01-8a8a-4f77-84a5-3a537294aea0", "sighting_of_ref": "indicator--a20a4553-cd7f-4dda-bc87-3935660aa665", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ce0f84-0930-418f-b1af-194e49cd3135", "sighting_of_ref": "indicator--84f22695-bca1-47df-b149-859034817e68", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d080e56e-cd99-449b-840c-2786460a9204", "sighting_of_ref": "indicator--b3ac8e4b-31ab-4991-b673-08560e2d73b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfda32e-fd2a-480b-b85b-f2c504fbb4fa", "sighting_of_ref": "indicator--e34c3dbf-3e15-45ad-a654-f11a548c7930", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7f10fb-c013-4475-b6f2-8990455f1d86", "sighting_of_ref": "indicator--6f431894-5b9e-4ddd-ace8-7c5a39a209de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9cb4ee-d828-4a03-96cb-8cde56680df2", "sighting_of_ref": "indicator--8cf049fd-2480-4f8d-af94-806236dd168c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a89f82-ae30-4927-9d40-c53839927c21", "sighting_of_ref": "indicator--48859725-eac2-4640-8ec7-e63d5605ed17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00419b65-a5ce-4996-845b-47ebce586fdd", "sighting_of_ref": "indicator--6958d071-8dd4-4341-8b6e-f2a37e00157f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571f5df9-1920-4117-8d71-2e1d68bc9def", "sighting_of_ref": "indicator--bb9d71ee-6749-4d14-98c7-19ce833bf602", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adef4a6f-996c-444b-8265-2952f673e26a", "sighting_of_ref": "indicator--369993d6-0ae2-4862-97f4-2054c419edea", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36565469-9559-4c33-b029-f4ce3a2dc8b8", "sighting_of_ref": "indicator--2531bce7-bcef-4fa7-a12c-a0fd62d709ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3352262a-22c6-4309-bced-2eb08547d0a4", "sighting_of_ref": "indicator--2ce1ffd2-6607-4d19-a3c0-75005a1d55f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0577c3dd-039b-4f40-86e4-83238afd7930", "sighting_of_ref": "indicator--770a87e9-a676-4b94-810a-590f32ca8596", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a087cb79-e5ea-432b-bd4e-f225e1907f75", "sighting_of_ref": "indicator--a4fb09c4-7399-4f83-9b0b-1a1567917242", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4182c2f3-7241-4a8c-83ac-a76d3f0346e1", "sighting_of_ref": "indicator--2d1a8562-6a6f-451a-99c5-69c144bd245a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3780c4fb-6805-4a3a-b475-1e65da18ee0f", "sighting_of_ref": "indicator--c2b61e91-eff9-438b-84e7-9b1c051191c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f40b06-fc2c-460d-8c13-5d3d50d995b9", "sighting_of_ref": "indicator--0f76fb1d-23eb-41b6-8608-64dcb98d0e8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8950bc21-c9b0-4b81-99d0-9538b824130e", "sighting_of_ref": "indicator--df29176c-4418-46e4-a27e-abdc608c2e38", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654715be-e6b2-4afe-b7ae-fee8e32ea33a", "sighting_of_ref": "indicator--0fff4391-02f8-44ca-b928-15a3358812ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e9dbff-c2f0-4795-bed1-8d6a194f0889", "sighting_of_ref": "indicator--5a8b4ca3-bcbd-48a8-9150-1678c70ffe61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b39740-46fd-4948-a28c-954a28548d9d", "sighting_of_ref": "indicator--e98ec745-7c76-47f7-93f2-c79ae56666ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960b348c-0ef8-4f98-b961-bdfa1d49a030", "sighting_of_ref": "indicator--e67c36e9-804c-4c7e-9c19-c076203345fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4232959e-8cce-4d40-8fe8-6870829da7bb", "sighting_of_ref": "indicator--607144cd-edc6-4779-9086-1d8c51de46ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77c8b68-3bdc-49a7-99d4-c1aae44bcb77", "sighting_of_ref": "indicator--f6dbc513-7b54-4ae5-84da-47909e4c7dd0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8905c9f7-c998-4fe4-8ffb-379cb6254d3c", "sighting_of_ref": "indicator--73dfb997-258e-4a38-9b20-d3dea4000bf0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b821b-06be-4291-b01e-1bc71e7132e6", "sighting_of_ref": "indicator--54f8d8af-089e-4d77-87bd-ab019dd66930", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b677cd-943f-40e0-abc4-b221d07e70fa", "sighting_of_ref": "indicator--9b89b69c-a3cd-4adc-8145-ac27ae0def94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a520ea9d-c185-4a0b-b366-0d5364d6a570", "sighting_of_ref": "indicator--bdc9a920-477d-4256-b8a9-24b57cc10cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd124c16-3e54-4178-8f52-24ea1d94e444", "sighting_of_ref": "indicator--90ba8f89-98e8-44ec-9e23-ee443ddade14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634bac78-5d63-4def-a9bf-5f9e9ede12ed", "sighting_of_ref": "indicator--fa396889-692d-40fa-8921-c21a657d045d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afb46ef-25f7-465e-af0a-1754d50bfcf6", "sighting_of_ref": "indicator--20a7d7f2-b375-4c98-b96f-6757e7fff64d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6503f912-dc73-42e4-b4c0-d7f97b81fb9f", "sighting_of_ref": "indicator--a6888f81-4742-4fd9-a0c9-69e4dc053eed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6966e8-551c-46d9-bab4-2f96538f3798", "sighting_of_ref": "indicator--8eba9e6c-cf72-4a87-a4ec-0bfc3d79bf5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f91e2cb-319a-40e5-8b9b-f869f7a4c055", "sighting_of_ref": "indicator--ad0e2680-1898-4f76-a60a-93b530d21fda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfbd7d0-e1c9-461d-9145-85fd98359a90", "sighting_of_ref": "indicator--2120c36b-6638-4571-a728-21680c2bc819", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65dc4e1-48e4-4aba-a887-cd54ab0a46cd", "sighting_of_ref": "indicator--3d06b829-7ba0-4737-993e-adfd03e72eb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fd52a9-30fc-410a-9892-05a15be0e924", "sighting_of_ref": "indicator--e3477ba3-8016-43b9-b6eb-117592214fd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b5d8db-399f-4d11-b361-c0b516128cbc", "sighting_of_ref": "indicator--da809001-9fe4-47b9-9c68-dac357a67456", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc83eed-8238-4a3c-9140-5ef01ba404b3", "sighting_of_ref": "indicator--afedb359-c229-44e0-8f57-33dd4ee08de3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6048eb0a-1684-4b20-a618-705f4138ecd9", "sighting_of_ref": "indicator--5298e915-f7ff-4808-9b57-aa81e5ef984c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a1df88-d136-4958-ba34-0c9ec9455b4d", "sighting_of_ref": "indicator--fd74ec4b-687d-4b8e-884e-a59fe41fa352", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fdc4db-0997-4f32-a495-894f0552fee9", "sighting_of_ref": "indicator--90ed2144-15a4-443b-b7c0-d9396d89c448", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d19e6fd-8a06-4ef3-a602-2ef0418565b3", "sighting_of_ref": "indicator--f3dd89f2-f8ea-4784-9a4f-bc604d2cba83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33e085d-c15d-4a88-b9da-ccbe1afdef94", "sighting_of_ref": "indicator--1b46e709-743e-4e5b-9b2a-4b45a7f9bd36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b3bf10-9c80-4100-b884-e6aa3b3674ea", "sighting_of_ref": "indicator--30e761e8-29da-4012-a8b8-f1c6eee7f437", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ad9a6c-fefa-4c9e-8237-1ded4d794037", "sighting_of_ref": "indicator--92a69b01-3c0e-4602-9ee4-88f52372d129", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2f8b61-d319-4aea-9a49-b9f9375123de", "sighting_of_ref": "indicator--92a69b01-3c0e-4602-9ee4-88f52372d129", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f369402-eff6-4628-92f1-7a0f2a04ce7e", "sighting_of_ref": "indicator--44ce9af7-818e-4cff-805f-27fa74ef5cf7", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb6072e-fa97-47fb-8f86-4b9a3c8da4ce", "sighting_of_ref": "indicator--423b3397-6117-4dd8-8dbb-6d3aa0d690fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad640490-ab2a-4438-ae5c-21a9d09b4381", "sighting_of_ref": "indicator--bbd291dd-da54-4b72-935a-0d8ad07cfaad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897cac8b-e9df-4df0-b988-45a20d9e40e1", "sighting_of_ref": "indicator--44de058e-6927-42e4-ba17-0bf7e5086b0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde210ba-3208-40e5-a4f8-23a901f43f4d", "sighting_of_ref": "indicator--ad0275ce-c163-47a5-8dd9-9eddcd55aa27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b710ba6-f28c-40e6-be19-955c64343870", "sighting_of_ref": "indicator--d7673062-983f-444b-bd6a-f69a5cb1ccdb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef094c7b-697c-4bf6-ad3d-ba4f6efc1b61", "sighting_of_ref": "indicator--0f8c1315-e277-4772-a02d-c890f6622ba7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dc1f71-ad7c-41b1-b8e7-e1698b5e1100", "sighting_of_ref": "indicator--f5cd244b-3d79-40e3-af67-1d9842a4a4d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a8d787-e707-42f6-b467-90b8b1b3a818", "sighting_of_ref": "indicator--5fd73138-8654-4a67-8c64-d0e99049a813", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d1755-7bb7-46c1-ada9-028e6aef3861", "sighting_of_ref": "indicator--40b279e4-18af-4f07-b825-fb88653e4757", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a9db1c-9c3d-4086-9df6-5ddad5b36c91", "sighting_of_ref": "indicator--fbf3aa25-ab60-4f6e-9232-50c92211b04c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07d506c-6cd5-4d17-acdb-a277ed751044", "sighting_of_ref": "indicator--415f3935-3eca-44ad-b92c-9cefdd2c9efd", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3340d887-495a-478a-b550-e8a60e77ce73", "sighting_of_ref": "indicator--415f3935-3eca-44ad-b92c-9cefdd2c9efd", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5966aadd-8ae6-4035-98bf-7ed29cc60d9a", "sighting_of_ref": "indicator--2279013c-c5b8-4ba1-9564-999de9d05ee7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c79f16-1ee2-411d-9068-1269a505670b", "sighting_of_ref": "indicator--7f64014b-29f9-40b5-ad60-eeac0346b172", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291f9ac7-ebb8-4ac4-8f65-75e7c0e41b41", "sighting_of_ref": "indicator--2d87c758-6ba8-46a4-bb71-d59c10c47718", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f866c59-7e17-4252-ac1f-3ee95642ff18", "sighting_of_ref": "indicator--910f348f-cf9b-4f0b-8d35-c12b36f80534", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec1b95a-9fa1-4883-a14e-aa3a11a32ee3", "sighting_of_ref": "indicator--67fdc2c1-6ae3-4d83-9adf-41b8952c8bb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aa8a91-2da7-4106-9ab6-2d99dab7f051", "sighting_of_ref": "indicator--8c786ab2-66c3-4155-9e6f-1b07bd441fce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39797592-1fd9-4346-9418-bd6dce10fdd9", "sighting_of_ref": "indicator--a339a21b-7051-42e6-8de2-6995380e6f05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ca4c4e-5026-492d-8ce9-a16c1b8466bb", "sighting_of_ref": "indicator--9f8c228e-dd75-4f84-89fc-047a0fd5b2ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc63ec69-e74c-4cf5-a55d-58809fd9a30f", "sighting_of_ref": "indicator--ee38a2cd-79af-4135-b529-b90ca71e2624", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6fad3a-d824-4577-ac5b-2b91b338c9fe", "sighting_of_ref": "indicator--78352af9-b635-4d05-9815-e75bb9299f1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ccc938-bc20-411c-b8f8-5b0bdfea707d", "sighting_of_ref": "indicator--a8da8082-78cc-44d5-ac56-5ad2d8b763db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518a757-8e2b-4318-956c-33681040480a", "sighting_of_ref": "indicator--382338bb-3c9b-4c08-8a83-0d29d7967658", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d98cb0-6c71-47bf-93d8-7bb41b105d00", "sighting_of_ref": "indicator--84b3229f-8028-4afc-b900-f18d3fa34bae", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62eeb4f3-882d-4595-b7ea-5d6c39a90a09", "sighting_of_ref": "indicator--e4ad5800-49e3-45e1-a561-d4b34861ab57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef899f8-bf9c-43c0-bd65-6d28273c9c82", "sighting_of_ref": "indicator--476e8305-9b8c-40ca-a39f-2af4ff8813c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ebedbc-a3d2-4dad-88f7-ac8c2f1b311c", "sighting_of_ref": "indicator--44a87368-c330-4693-b5b1-adf5014ca357", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1dc58d-eb79-449d-92ac-e68c31256dbc", "sighting_of_ref": "indicator--ed1298ed-cc54-4b73-8e88-390e90d63fd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3952cf90-5ed7-4b5e-a329-596b5192a840", "sighting_of_ref": "indicator--e29b2cd8-551c-4d03-b454-ec74e00a62ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a68fff-39b2-4fa0-b5f6-d683bc837669", "sighting_of_ref": "indicator--296c516c-4872-4eea-97e5-2823a6aa1860", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5cd3ac-3e02-4ad2-b99a-9fa149b08edf", "sighting_of_ref": "indicator--acd15344-bebf-4b94-9dc2-ba3b0b5d95cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9178f8a3-d47c-4f60-b308-e0ae6cc1f497", "sighting_of_ref": "indicator--dff8f037-c3c2-459a-991b-049caeb1882e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51345c69-83e0-47d9-b221-d4ca57623084", "sighting_of_ref": "indicator--1bd8381e-cf05-4fd9-9c9f-2ffefb26e0f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fda22e6-51c5-4f1b-a18f-2b533a21af36", "sighting_of_ref": "indicator--6c3a546f-6b13-4996-b939-e33f02c82362", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebef5d9-3021-4fcf-be7d-efb88162974a", "sighting_of_ref": "indicator--deb69735-5e85-45ff-a01f-e9bb9d74cb9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b203a3d7-93c9-4f74-ae9f-2b8a267e046e", "sighting_of_ref": "indicator--0c9ee493-c824-4a4b-9ed0-268be0a74016", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3744446c-9413-4525-8d94-21f0c3c5feea", "sighting_of_ref": "indicator--cf3918bb-ea1b-454a-8304-48bea9f1c069", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e77473-92dc-4109-96cb-5bbdd7daa866", "sighting_of_ref": "indicator--7e0bf5f2-5fc0-4b43-9a80-b7847939f471", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b235fd13-dc00-4090-b28c-82d39aef7370", "sighting_of_ref": "indicator--f788755e-f069-4caf-aa73-daa6112e110c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52991232-700b-43fb-b6bd-3eebaa7b8fa7", "sighting_of_ref": "indicator--b4cfb1a1-3a1f-467e-9076-7409f69214db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7ae28e-281e-454d-874a-b73f7f44d9a9", "sighting_of_ref": "indicator--bab469a5-3597-40ef-a903-82a71ccf7fbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34eab50b-5bf4-4832-b186-2c518912c02b", "sighting_of_ref": "indicator--0f959b54-f7ff-44d0-8217-698d8270f228", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3893642c-520c-47e9-9322-b0bf12a23fc5", "sighting_of_ref": "indicator--514e20d3-dcbc-43ab-a7ac-b6f5c49c2041", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1855461-3055-466b-8494-5f4271e320a6", "sighting_of_ref": "indicator--ef25634c-7141-45a1-9e51-4308b6686901", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341408a2-6d58-4a78-b211-a106a26c89aa", "sighting_of_ref": "indicator--fbf31b0a-d652-4f9a-8f28-2393d0531a5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1618c5c-3172-4d0a-81a2-dde1f99487bf", "sighting_of_ref": "indicator--7bb1f3b2-f0b5-4249-8961-03a875ac533d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f969f0bb-f9e2-4562-8942-7e033f6b9d01", "sighting_of_ref": "indicator--8f4e1e41-ff67-4d61-b634-134a66d2535b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbbb9f3-4cfa-4af3-a481-b23d4c3cb0c2", "sighting_of_ref": "indicator--163d1acc-9465-4e03-a356-17e8db39fbab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd8f4dc-0866-499c-b763-bcc592fa2a71", "sighting_of_ref": "indicator--18332253-27a5-4773-aad6-abb654a707c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9a7fa0-7c43-4726-b711-602681c9270b", "sighting_of_ref": "indicator--73d464be-dc70-4c18-894a-32be512c993e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313d1d69-5725-452b-950f-cf06c4e5071c", "sighting_of_ref": "indicator--bfaa6a20-59fe-4896-946a-dc54414f807b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcfeee8-7937-48df-84ba-f2595c8922bd", "sighting_of_ref": "indicator--17b90b25-9225-48a9-90f3-4e4c7b92c855", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72172f9-9148-4e03-be57-6c97a216a138", "sighting_of_ref": "indicator--86ad4e65-90d4-41e6-81ff-21cc4c81cf2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6248f2fd-5a3c-4852-a518-90e84bc5c9ed", "sighting_of_ref": "indicator--1f2a8c1e-b802-4dba-a692-c90a831fa09a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52ed669-b516-44e7-9303-f4d426c2c7b5", "sighting_of_ref": "indicator--94acb9c1-075a-4da3-bc55-02c128982f81", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c9fbe-6ad1-4120-b840-7a7abfbf4537", "sighting_of_ref": "indicator--ffcade6f-3b87-439e-8cd5-eccb01138dbf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ec36e5-83f3-4d3b-afd7-c1a0a704eff6", "sighting_of_ref": "indicator--0243f3d8-2739-45b0-b04c-3af976ab1157", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e682b1a-03b7-45ef-96d3-836dc6a76ddd", "sighting_of_ref": "indicator--a4eb1ab5-e196-4ba6-82c6-747c5f026fbc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9959a879-0387-4178-be54-0cc4dcfe18f1", "sighting_of_ref": "indicator--bf299100-7656-4611-8129-dadf946fda9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91318dc-319a-413d-96c0-8176d06fe333", "sighting_of_ref": "indicator--c2486245-a571-419b-9dc8-00725f52a27a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f84bf37-7526-40e3-bd1d-dc41baf75a5f", "sighting_of_ref": "indicator--82991735-3f97-4fd7-bdd9-5afeeee66477", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7311bdae-11fe-493b-b191-934be71afc06", "sighting_of_ref": "indicator--23bc507e-7d4a-43a4-9b8c-9e84756d7a14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6702ccd-ee78-45b8-bf76-d501f8dede37", "sighting_of_ref": "indicator--ce6d2420-7e83-46db-bdd6-fef4e49a5e20", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1288d2-4fae-476f-a5ce-1f57bfb036f2", "sighting_of_ref": "indicator--41c97381-4c86-4037-adcb-3e18661a371e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f029b6-525f-4a1f-b6ca-bcc88f89431b", "sighting_of_ref": "indicator--5af55d0f-05c3-444e-a864-16617e13c6bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6178b62-7dd7-4418-979c-959107c55733", "sighting_of_ref": "indicator--4139cec7-8c4a-4c05-8a62-357f9711a6cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d5220b-7adf-45d3-a161-eff61181069c", "sighting_of_ref": "indicator--7614f737-f1ad-49b0-80b0-f52eca778548", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3f9358-7010-4114-832c-65d7256c4d94", "sighting_of_ref": "indicator--b93fc76f-1e4e-479e-b85d-aa5602069576", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19038444-d374-4eb2-8744-c4361f069201", "sighting_of_ref": "indicator--9e40d60b-7954-4aae-bc1b-9a60cfbf032e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb78b99-8103-4980-929d-0aadcbc52297", "sighting_of_ref": "indicator--d510b825-14c6-49aa-8e09-f8694885f137", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cfb8f6-72bf-47ad-aed9-6b527916ff4d", "sighting_of_ref": "indicator--88e6cc8c-4cb8-4a3b-bab1-fb60ab834d00", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f08691-a218-477d-8f86-d85d26b896ef", "sighting_of_ref": "indicator--acbe614d-72ca-480c-8403-10d0c1174322", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382f956a-b560-4d6c-a751-997de68b4187", "sighting_of_ref": "indicator--2c84bd52-b1cf-49c4-bfad-ffb842f2d618", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525589c3-9f84-44c4-a6d4-df5cab42cf23", "sighting_of_ref": "indicator--15705dec-51bc-410b-8672-dbf54f9ebbe8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842660b3-4471-449b-9b17-d23ad5509741", "sighting_of_ref": "indicator--b3ca6e7a-b732-4d1c-912d-2444d3ff5fee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58357a8-9dd2-4362-903c-d80fcfb5a1cc", "sighting_of_ref": "indicator--114e5892-d49d-42e9-8578-25717463263a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2906be-64ac-4179-b52e-455fe71614b5", "sighting_of_ref": "indicator--e797a56c-729b-4b23-a28e-2c28d3d96ec6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e59dea6-b84d-4073-b1a7-2fd6bb5c0db5", "sighting_of_ref": "indicator--ef24de77-44f7-4140-a962-5fb0c36b9ede", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5fead8-779c-4560-92c3-ef9bed4292a8", "sighting_of_ref": "indicator--9e0796c1-3f00-46cb-9546-f55b23f4e726", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e28aab-ec7b-4b09-83e3-fc83e2dff952", "sighting_of_ref": "indicator--5778ec61-606d-4a80-9d78-6c826fd40e2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de26838-5e1b-45c3-b1a2-af2706f4bdef", "sighting_of_ref": "indicator--afd29927-4b05-4393-99fb-d060be169290", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc939e7-d2b7-4785-ad5e-f78d0c433c77", "sighting_of_ref": "indicator--98028d6d-f807-4919-9a26-b09fbc51ab8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46096bb-a86d-44a1-8359-80bca7196251", "sighting_of_ref": "indicator--0cff4a35-ce91-4d3d-879f-99006d7d7720", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d0862f-98f2-4d93-8ce1-6c24ec25dd09", "sighting_of_ref": "indicator--b6f742a9-30bd-4b91-b952-a654d9dc74e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc27335-9061-4a0e-9766-8c0da50c2bd6", "sighting_of_ref": "indicator--3f091f19-ab34-46d3-a005-862f67651689", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa974ad0-0e26-41b6-b556-166a062af705", "sighting_of_ref": "indicator--91dd29bb-9d07-4729-a1dd-d100b3aca882", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5ffba6-ad5b-4660-9493-3d82631b09c8", "sighting_of_ref": "indicator--5c30aa23-dcde-4a06-a71e-c108cc8677c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fce1e8-f25c-45df-aa54-9f8e4c5dd1f8", "sighting_of_ref": "indicator--bdc11494-9ec3-491c-9330-af6945f4c5a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e051cf-9f23-425d-be86-46338f99c2c5", "sighting_of_ref": "indicator--06d832f9-add8-4577-ab9d-b0bb12a3dd04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40996a1a-c3b5-42da-82d0-01550977ae49", "sighting_of_ref": "indicator--a41c2cac-563e-41fa-af9b-f0cdf564d1b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04a9463-6159-4000-b359-2ce66a398eac", "sighting_of_ref": "indicator--f9993a13-a39a-4d8f-b404-9b84ee9ef403", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47557ac4-69d0-4157-9504-e13dea6bb819", "sighting_of_ref": "indicator--46708231-3cc1-45f6-8cc1-801c57358998", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fffdeb-b53d-40f3-8b7a-08499c6c8ea1", "sighting_of_ref": "indicator--479d789b-a780-4828-ae6a-3a9b9529c2ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67237576-d6d9-4de7-949c-ef0c28b833af", "sighting_of_ref": "indicator--8d6edf92-4c25-422a-af3f-12c7c519f155", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6daebf-60ee-44b3-965c-eff3988f59ca", "sighting_of_ref": "indicator--542ca04a-116a-46e0-8981-9da2a25120a8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c74d0a-0322-4c70-a29e-ed203d34cb7e", "sighting_of_ref": "indicator--4febf740-ef5c-4d9b-8c14-fd06b0ab864d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc1bd4f-bfa0-46e4-a4b1-89fc62f79f6d", "sighting_of_ref": "indicator--292b5d2b-908e-456a-9ab9-6d24274eea8b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b923c-60d2-4c06-9e28-ae82a110edba", "sighting_of_ref": "indicator--f76219a8-b913-491c-b832-636875eaec6f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842ab79e-6d94-47f5-afb9-65a96183e98b", "sighting_of_ref": "indicator--c7ccb7c4-46f8-4577-b864-32630bd902d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104793d6-89b7-4494-be4d-193ac77f97ec", "sighting_of_ref": "indicator--21e77121-06a6-45b5-b26c-4ba4b167bbaf", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4f553-75c1-425f-b705-c208b28fb173", "sighting_of_ref": "indicator--2b275fd2-85b8-4a5d-8872-1abc88cd301b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a443f448-db32-48c0-b8d8-34e48d3d2476", "sighting_of_ref": "indicator--f19bc060-fce8-45ea-9a53-8624137c58fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7358ed87-0a56-49d9-b360-9a99c7ee04d6", "sighting_of_ref": "indicator--98f70d47-736b-4e94-a380-ed9bc757e36d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0464d9-fdd8-4f47-881c-36a9b0382b9e", "sighting_of_ref": "indicator--181dd6fa-5fa4-436d-af9d-f84fee01270f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0702b0-3e1c-40ae-8022-012d778964e8", "sighting_of_ref": "indicator--e080f73d-01b3-4a54-bf33-315411b8c895", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcecc634-630e-4394-95c5-4b8c57426d9e", "sighting_of_ref": "indicator--b869273a-eb15-4f86-b583-5f4457e80d3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4efd6-60b9-4f91-82c7-2a203a5ab2dd", "sighting_of_ref": "indicator--53cc517d-428e-41c7-9445-d0d0fbca4ab8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca16e09-6f47-4361-80ec-c3f158fb30f2", "sighting_of_ref": "indicator--79a7369b-2683-4494-9918-c967d6b05558", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c72cfee-c4b7-4e81-aeb6-bce42433fe50", "sighting_of_ref": "indicator--58a76041-1c2a-40b8-9437-9b4d98909464", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4564efef-2192-40d3-b43d-9996c82ee1e1", "sighting_of_ref": "indicator--c892c18f-7ced-4556-b7b6-e1339b4f233c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c17e96-2703-4a2a-9cda-05eccab67656", "sighting_of_ref": "indicator--a509f3e1-f96c-4d84-9edb-85784a14f09d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3dbb13-e07e-4038-bdf0-6d731c8ef68b", "sighting_of_ref": "indicator--f4a81977-b8ed-490d-bf08-074a9f7f11cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33676acf-c464-4dbf-8761-22f719779470", "sighting_of_ref": "indicator--744ed18f-4ddd-4b7d-a2db-253274cfbb1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed1fa8b-38a9-4cb4-9f98-bedbab3527a3", "sighting_of_ref": "indicator--60c8791c-55ab-4181-a2a8-107ed7c49813", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b6a4eb-eb90-42bf-b2da-9bb7b65b29d3", "sighting_of_ref": "indicator--dceb3386-048a-49e8-bfa8-3d3891f97d19", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0befdef4-a38f-4745-b88b-a74dcbf4ad3c", "sighting_of_ref": "indicator--befed4f5-c72f-4bc5-a691-55e9e5cb6264", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e07ccf-9add-4741-ba2b-b60e62ac3e94", "sighting_of_ref": "indicator--97ce5c42-4690-44cc-b3cf-b026c05b3da5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bb9148-71a8-41d8-b5fb-e1870f651c71", "sighting_of_ref": "indicator--b6a9d0e6-5428-4bb7-bb27-d9396cb95b82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e0ebca-adda-4320-a3ca-d19b35324f69", "sighting_of_ref": "indicator--d8c616ba-66d1-484d-8f3f-7647e5510c3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eaaafd-692d-46f5-aeba-6b6673f88703", "sighting_of_ref": "indicator--c35faec1-84ad-438a-b73a-6916f244f9b4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a276527-4076-4517-a36e-4a8ec42d178a", "sighting_of_ref": "indicator--c98b721c-0b71-464a-8546-2f64a5ec84f9", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64120f12-1edc-4d22-9249-6aa0fa7a5b7d", "sighting_of_ref": "indicator--4e2b8cd4-1d70-49c4-89ba-b87389233c4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4638dca3-9bff-4510-b163-10dd37d45f81", "sighting_of_ref": "indicator--f7696055-337c-48af-866a-350f2378b63f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b367557a-0a91-48cf-9fa2-3a6941f56660", "sighting_of_ref": "indicator--c3bacea7-ab57-4d7b-b1b8-67f9e48d061e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8057d1d2-ac3f-4af4-b7c4-b43d6fbdb45a", "sighting_of_ref": "indicator--754b787c-5b88-4678-a9e2-042215734836", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41a85e9-8d95-4549-9a41-32bacdecfaec", "sighting_of_ref": "indicator--fee9891e-8b82-4cc2-90d6-087134a8c339", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9419af7c-6576-4e95-9907-467402d90a41", "sighting_of_ref": "indicator--b428a8a7-bef5-47a6-9c5a-36080bfb3fc9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bc576e-fef2-45c4-8be8-2103889e1c21", "sighting_of_ref": "indicator--dc2b2748-fc90-4287-b089-0ebcf04f7b69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ee82fe-4a59-40f1-91bd-9b546c477cbe", "sighting_of_ref": "indicator--f58559dc-1b6e-49d5-bdd6-92ab22eb3bed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0431717f-0052-485b-ada5-e7d6a3c7acf5", "sighting_of_ref": "indicator--ed398f59-21aa-4890-bed0-82b234e0135f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e745c9f3-c948-4826-85d3-9b11f716448a", "sighting_of_ref": "indicator--e6c7c177-60fa-4cea-b355-7b651ee9d9e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9311f2-afff-4bfd-b904-b87a4a6d87aa", "sighting_of_ref": "indicator--c92ba871-842f-436d-aaad-e9fd9ba2f76f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7801c2-4c27-49f7-98e6-47f36be2ceb9", "sighting_of_ref": "indicator--54b6d18f-19f8-41db-841a-e12b55ed17f5", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07187b0-7bea-4489-97aa-21f609c289fa", "sighting_of_ref": "indicator--a57bc9f0-c7d8-4b0b-b6a1-d7579fdc20b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d751873-4622-4d48-924c-eb3045d06db4", "sighting_of_ref": "indicator--ff6aa498-48e6-4669-bed8-16f4875a3a04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696eea65-7c79-4f60-8c51-db61ff1a4a74", "sighting_of_ref": "indicator--0879c13e-f3b2-4a22-a22c-f959ec1d6457", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92386ac-883a-4d36-b876-473b5a54d3c8", "sighting_of_ref": "indicator--9d2d490d-5699-4b6e-b43c-7aeb7acf864c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04011c8f-742c-4ca5-bcd2-41c1578ba3ee", "sighting_of_ref": "indicator--0c3479fb-f91c-4df7-8df6-9542935092b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8bad2c-af24-437a-8fa6-c4074b114ee1", "sighting_of_ref": "indicator--f22cf775-b669-40b4-8e4c-d128eef73f70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29d5c45-94da-4669-baa7-c9c1523597da", "sighting_of_ref": "indicator--2cc073e4-116d-413f-b8c0-c6e84daed6bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4322f375-4030-470b-9b4c-c9f50296dc9c", "sighting_of_ref": "indicator--c4260264-b09a-45c5-9904-f20b829496fa", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a123d39-34e0-4183-b00b-15c9bf0f45f5", "sighting_of_ref": "indicator--c58b8bff-1c8c-4a35-aa00-314407472df2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74de3a74-a910-4dab-a417-ee9868afa644", "sighting_of_ref": "indicator--5fd273e6-f4b4-44c7-bb9b-837b4df87b17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f687ac90-d7ce-4007-b011-efdb01f609ee", "sighting_of_ref": "indicator--0fe099d8-8f51-4dee-a422-4c6643f5dee2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774bc84b-e81f-40ec-9962-4fcf2b853785", "sighting_of_ref": "indicator--e1f6f438-1c64-4a64-b1d3-137f34e9ef5d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f3811e-a5a0-430e-930e-976e0a25c5b4", "sighting_of_ref": "indicator--9b8c42d4-c75c-4bbe-91af-12d36b290aee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedf6f23-0a38-4688-a6f7-058a601dbbec", "sighting_of_ref": "indicator--c3a3ab03-ad8b-4e8c-a867-4c4fb22f8c85", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45975a1c-9cba-4d2c-9b1e-dab50675382f", "sighting_of_ref": "indicator--13f2b61c-d8e1-4513-bd6e-ab34c408743d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6e5ef8-715c-40b9-9613-d0cd120b9530", "sighting_of_ref": "indicator--8f2b5c7c-efc4-4dcd-821c-49c62e754fd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c110857-f892-451e-8a14-ac6952d8f334", "sighting_of_ref": "indicator--f0b3a850-a53c-44cd-9300-5b31d74d9909", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a181c6-0d16-4baf-ad2d-8b8fd538ae9e", "sighting_of_ref": "indicator--805f300b-3f87-4eef-8f43-cb9758b564a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa711bf-8df4-4a55-bbe7-7cceb971a182", "sighting_of_ref": "indicator--88878dbe-76f5-49c5-bae9-8f98df9b79c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48d514-ddad-444e-b73c-3b4c1a2780be", "sighting_of_ref": "indicator--d0956fc0-8ef0-4165-8bbf-95e572692a6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa5e3bb-dc8c-4e39-9345-e8c0764b7c6a", "sighting_of_ref": "indicator--137f73af-4c5e-4b5b-bdbc-c041c60ef2f8", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a05a98-3fb6-44fe-a340-e9bb59723cb9", "sighting_of_ref": "indicator--4291f4fc-9d4a-40b4-bf71-571354935520", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d556d8-3d56-479e-b810-e511c04c766e", "sighting_of_ref": "indicator--c6b6f863-c437-416e-8784-2907d6844f7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2bfd9f-eb30-43db-9722-f54e32030ca1", "sighting_of_ref": "indicator--ce5651e4-2e52-425d-8bd4-4060b95d8af4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81de6e23-95b3-452b-9b1d-9def20b60bd4", "sighting_of_ref": "indicator--511d6a7f-dca7-4500-a443-ef0ca1c964cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2564417-0872-44dc-a53f-9f35da582288", "sighting_of_ref": "indicator--21af3255-5553-430f-9cff-7102dbb8e2d0", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e45299-4c62-44e2-849f-725126adb582", "sighting_of_ref": "indicator--9624ce95-9d92-4936-b9ac-fac46bc53569", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07eb471-5631-436a-9d85-3937ea07fdc8", "sighting_of_ref": "indicator--ddbe2047-70f2-4549-966e-cafb3198769f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab174568-a2c1-47de-96dd-218ba494060a", "sighting_of_ref": "indicator--42d96d98-3eab-4804-b6f8-83d6896e72b4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68755071-4d32-45a0-a26b-7d3b758071bf", "sighting_of_ref": "indicator--1827c8aa-5c0c-40cb-b78b-695ff32aca24", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdaed7c-c1d0-4505-9c1e-fc19fb9a5793", "sighting_of_ref": "indicator--df01066a-3056-46b6-a27f-32a42955369f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc86e36-27d7-4643-9aaa-e0333bb8e5ba", "sighting_of_ref": "indicator--b6327320-09c0-4a52-8351-37d40107b95a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf2bd47-3888-43fa-a52a-0ac3b157b040", "sighting_of_ref": "indicator--1e87c125-50c2-4b5e-8512-2b5668b48dac", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8f2fd8-11b9-48a7-a328-e652ea1c5c09", "sighting_of_ref": "indicator--acb00256-ca83-4267-8fa3-631273daf21d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a824c99-3f01-4f0d-96e1-7101ea36d445", "sighting_of_ref": "indicator--8e63c551-9b45-4f33-a30a-cac427bffa3d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bde5c4-6657-45d2-bfcf-842dc7b7c930", "sighting_of_ref": "indicator--1ea6289d-7ab0-40f2-8f2b-87f241cdfbe5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7d5660-a5eb-453c-a60c-c60d9eb66dcc", "sighting_of_ref": "indicator--632e2f42-dadc-4312-bae9-c29aed76369e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bad0afa-80ad-4e48-bc23-e102d9f942ef", "sighting_of_ref": "indicator--0ae50736-71b1-43b6-9444-e3bd5ae6f680", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cdaec2-b70a-42f5-887e-d81d803cc2b9", "sighting_of_ref": "indicator--f9f1c443-d894-4782-93c9-3f3226d9647a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbf9084-2116-4a74-8ec0-0fd91340a64f", "sighting_of_ref": "indicator--842f0e79-de21-49e0-8f5c-05e8771baf61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bdda89-f311-46d5-a97f-d5c41cdd4889", "sighting_of_ref": "indicator--6411e006-856d-4248-8969-a749c7964389", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee113cf7-8723-4c70-ab98-d5bc33bff5c0", "sighting_of_ref": "indicator--67332aad-02f5-4891-a0c5-60eca5d9c34e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9bef7a-cbbb-4e87-b6c1-89e073a3a859", "sighting_of_ref": "indicator--9971794b-468c-454f-bff8-5b13240399ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3df6a48-9829-4869-b673-66079af0eca4", "sighting_of_ref": "indicator--48c52703-3357-4e41-a724-6f17ed94369d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f167d41-b106-42f4-a996-6a520c5232eb", "sighting_of_ref": "indicator--4c9d71d0-bb6b-494f-a006-97491ed08293", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb6a30d-25d3-4a69-b601-5e4af3d0ef3a", "sighting_of_ref": "indicator--42b678bd-8dd6-43c8-9f0e-b44df84f417b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95ee616-a1ac-43f8-ad42-53a82e0ea151", "sighting_of_ref": "indicator--53c61813-a509-4be5-b0ee-19d0a663157c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f222cfd-7267-4f4e-87d3-038a84372904", "sighting_of_ref": "indicator--430fa8ad-01ed-4583-ada7-fd1829d54625", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ec9ad6-8dc2-4754-ac04-b7146c51edb1", "sighting_of_ref": "indicator--dcba7bfc-36cc-4370-b195-9d1f063a75ed", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4ac5ce-3f4d-469a-ade6-383d18218a2c", "sighting_of_ref": "indicator--dcba7bfc-36cc-4370-b195-9d1f063a75ed", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae2172d-acbf-4764-8d2e-f6f176342b00", "sighting_of_ref": "indicator--d8a856f0-7253-4fdf-af67-9e8dff5bbfae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76de1db2-6bc9-4137-aaa4-ec0042891143", "sighting_of_ref": "indicator--4e580c2c-5d59-4efa-a721-e8cd85b56e2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4f4241-c2a8-45dc-bc02-ff77bce33376", "sighting_of_ref": "indicator--3d600ac8-1a4a-4312-9b7a-3fdf91f7ac62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97046adb-f2ba-4b59-9776-7faebde2c5a6", "sighting_of_ref": "indicator--9da524d7-d658-45b7-a454-7dd2a2cc0dd2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad14a555-76f1-40ff-a692-a99b68fecafc", "sighting_of_ref": "indicator--c37ca827-3d7b-4322-a48c-363e0b87222e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44654f07-91ee-4ea1-9390-c68fe2e4c919", "sighting_of_ref": "indicator--c6873fd8-85f0-4a07-8b2c-c4dda74b0bfe", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88058b76-386c-4bc3-8872-585913d47191", "sighting_of_ref": "indicator--e3e76c4c-5533-4160-b72f-060435402d80", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dd26f7-0b86-4020-9f42-a1dc73af3792", "sighting_of_ref": "indicator--307bfd5b-7076-469b-a212-dc1d737578a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e923a1-2501-49d2-b6f8-66e9ede593d5", "sighting_of_ref": "indicator--d2c6148d-f00e-4590-a8f7-241f74643112", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04475e60-bffd-4d45-8da5-05e412811364", "sighting_of_ref": "indicator--5fa01c10-b40e-4972-be20-d1e779c1716e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31a4278-ad91-4fce-9116-3d1a9c2469b5", "sighting_of_ref": "indicator--dc02c3c4-f0ff-4df6-8825-2e919cad467a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64e48d5-d82a-4b49-9c12-3beedb86d243", "sighting_of_ref": "indicator--eab1da78-9383-401b-ad8d-faa1a86ae0f7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59d75c-d70b-433c-9bf1-aa22b3327a4b", "sighting_of_ref": "indicator--eab1da78-9383-401b-ad8d-faa1a86ae0f7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b2298a-b9e1-4412-861a-b669594220d7", "sighting_of_ref": "indicator--eab1da78-9383-401b-ad8d-faa1a86ae0f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528b71b6-380a-4fd1-9a3f-81697bfbcfb0", "sighting_of_ref": "indicator--ab83c3f0-2ecc-4884-81d2-fd001014954f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d117e5f7-1cee-46b9-9689-dbd44515cf32", "sighting_of_ref": "indicator--210862c7-3cc7-4e5d-865c-0b2f4355cff4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ba60a9-50fc-414f-89ad-2f1e3e7fecc5", "sighting_of_ref": "indicator--cb562d8f-d522-4f89-a62e-db728458fcc3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16087fd-a3a0-4004-a995-99c56bfca042", "sighting_of_ref": "indicator--d2412a0a-c5bd-4ce3-9750-9edef7287fb3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebf1f01-bf75-423d-8b2e-2731d4159916", "sighting_of_ref": "indicator--2056769b-5d3a-4500-af3f-b81467bc5643", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ec260d-1187-401e-b277-25bd6347be21", "sighting_of_ref": "indicator--e55311a9-865d-48b7-8d4d-0e6880a0a7cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1649d6-e3ed-4712-bdda-df014ef78690", "sighting_of_ref": "indicator--25d23289-178d-42a2-a3c7-aab3ce251611", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb7b693-c86f-470c-9197-5e106879e8e3", "sighting_of_ref": "indicator--402b16a4-43a0-4c43-863a-8b494e15913a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ff0618-2b39-430c-9b2f-12947d29a91d", "sighting_of_ref": "indicator--54cd549e-5639-4a1e-8b30-e7b86669784e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc30fc9-6c2e-4647-b2a6-72c27a84fb3a", "sighting_of_ref": "indicator--501c3576-553d-47d4-b1bd-1dacc477a005", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab81c8f5-584f-49e4-beb2-542502e3bbf5", "sighting_of_ref": "indicator--db510f56-6fd8-4994-8c24-01c531b4a018", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fca78b2-cba4-4dac-97e6-f8074ecc46c9", "sighting_of_ref": "indicator--f2e19991-45d9-4c5a-bb73-460a552092ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54f2b0d-3b60-4616-9a3c-d1a74335f8eb", "sighting_of_ref": "indicator--1eac1ec2-5215-4ace-8626-847dd8169518", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abad637d-9e12-4aee-8e24-d153deb9b71d", "sighting_of_ref": "indicator--89918539-ec2a-41ff-a514-66324829262e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97faf2ef-1165-4fde-91b6-f2e1743a4922", "sighting_of_ref": "indicator--845f4eb5-7890-44e3-967a-7eee490bf2ad", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efb974b-9d70-44f1-b36a-d69360ba2f42", "sighting_of_ref": "indicator--b4fe0192-1bcf-4d93-8085-25c8981aefe8", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feca8a21-6033-4ff2-a932-d83801ec22fc", "sighting_of_ref": "indicator--69fc2571-83a2-44a4-b7d1-93a85ce92e7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86cf442-a49c-4fe7-8a42-f6cbcda5092d", "sighting_of_ref": "indicator--5fc13fea-6282-497a-a8b4-cd859bfe805c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fcdcc9-3e49-4c72-bafe-f62a92fbe6b0", "sighting_of_ref": "indicator--5fc13fea-6282-497a-a8b4-cd859bfe805c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab1a82c-d61e-4963-891e-fff01f3dc5a8", "sighting_of_ref": "indicator--aa0758ba-7242-48f5-ba43-09444e7dc54b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90db60a1-d7e0-4e34-8b07-5363c6d4aa4a", "sighting_of_ref": "indicator--aa0758ba-7242-48f5-ba43-09444e7dc54b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac79b6f-157f-4a67-bbbc-091c6e1f6012", "sighting_of_ref": "indicator--715cba3f-9828-4dc6-8c84-12a855f52d3e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39806cd-3bc1-45bd-959f-c4d7d24295a7", "sighting_of_ref": "indicator--715cba3f-9828-4dc6-8c84-12a855f52d3e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70286e6f-f252-4952-8b3e-ada66b333a8a", "sighting_of_ref": "indicator--c0258381-d0cc-4f01-a56a-5e29f8f21645", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2021da18-f4aa-4bc7-b1a7-e4a2b97290bd", "sighting_of_ref": "indicator--16626e57-ad3a-48d2-8c87-f147056fe3b6", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1e6cd2-0bde-4c3b-bf5a-dbe4550604b2", "sighting_of_ref": "indicator--1dfb9111-09d6-4d05-9c27-bb5f7fabdc5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef830408-fba8-4c29-8302-6be9699d2fb5", "sighting_of_ref": "indicator--eed54841-4f8c-4ca5-b4c0-20359eb6df31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497bfebe-a90c-4e49-acc8-1d6048cf2fdb", "sighting_of_ref": "indicator--b817bf4d-5696-4436-ab2f-3ed3a388f371", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96094fc-e4b5-422c-9f35-93e382ff7fff", "sighting_of_ref": "indicator--4f481713-3f95-4c2c-9547-18b584b18182", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480e9134-740c-4811-b1b5-3644df6ead6c", "sighting_of_ref": "indicator--dc89ec45-22f0-4361-95eb-29e33ab726ee", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02266f13-42a8-43a8-b627-824b7e8c300f", "sighting_of_ref": "indicator--dc89ec45-22f0-4361-95eb-29e33ab726ee", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bab2f52-608e-4a46-8f26-e7c3b8785616", "sighting_of_ref": "indicator--233302be-9a29-4a03-ab0d-3c7c5cac3046", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847af1eb-4c31-4e95-a054-159f6f0f9ac0", "sighting_of_ref": "indicator--213ebda9-685a-4d14-b9dd-26fa9b376c03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c01669-b236-4853-9f2a-a5402cfe5129", "sighting_of_ref": "indicator--1640d1fd-167f-45a9-8750-3ce23f1b6d52", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aece962-e91c-49fd-90e1-ddf759a6d007", "sighting_of_ref": "indicator--d5a22416-8965-49c2-afde-8a104b4d4603", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4c43c3-b3fb-4604-8ded-ec8aa6d3a7f2", "sighting_of_ref": "indicator--a7731d26-2c94-475e-87f1-9f1855e0223a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77d3c82-b4f4-4d37-8a9b-b09c1e75940e", "sighting_of_ref": "indicator--aaa840df-cbae-414a-b88b-197ff5a507db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a203043-cfcc-42b0-bf75-a53794c7499a", "sighting_of_ref": "indicator--067ef8d1-fae1-413e-9c5d-4b8684394acb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8d488f-e12c-40fe-9046-328cdf8f9c31", "sighting_of_ref": "indicator--1e6acdb5-c29a-4b3f-a369-b7f16f107066", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5036982e-4de6-474d-9658-8a3e1fb1d421", "sighting_of_ref": "indicator--809830bf-517a-4d92-a523-4352975f109c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1e0904-8278-4783-882b-e5e78e80edd6", "sighting_of_ref": "indicator--b536284c-eb80-4625-bd08-2a45e748de43", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce96fe0-4f3f-49f5-9615-f21ae32f0386", "sighting_of_ref": "indicator--0c92478e-8c27-479b-9750-0db4950a8cfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e65294-a152-436e-ac73-a43bcf056d1c", "sighting_of_ref": "indicator--f764b2c5-1ee6-43a3-8e00-0e561de943d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d825b80-9a7e-4e42-b455-6c5b6c6bc629", "sighting_of_ref": "indicator--d8b6df35-9417-407b-997b-614124da936b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637381d7-a48a-40e1-8d20-4c5e5809659e", "sighting_of_ref": "indicator--f2f80e25-2475-4392-93d6-29cfe8da5911", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c0c5af-006b-4b2e-9951-ec24e2e450e0", "sighting_of_ref": "indicator--c445670c-dc2b-4fa2-a4b0-fe6dcf1beb8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e121526-0459-43cc-b11a-85cbbe919ed5", "sighting_of_ref": "indicator--d89fe869-a362-411a-8bc7-848eb01ce22b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1260fcbc-7ead-4be2-8bf4-fc7b71165d4c", "sighting_of_ref": "indicator--9475ccf9-bc37-4380-8e29-fba2477bbbdc", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a59976-61ea-4271-8d35-965b4152d252", "sighting_of_ref": "indicator--c989a184-a38c-49c7-82a1-1a5aa4faf709", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e8525b-3888-471b-9423-1b74110e6b82", "sighting_of_ref": "indicator--75ce93ac-5dbb-439b-8179-ae72e6f7cd78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85362163-a089-4305-afb3-4afa1fea7e21", "sighting_of_ref": "indicator--2f20c85e-b034-41fe-ac40-4c176dac2e39", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2fbfde-e67f-48c3-9ba5-7560a08aee41", "sighting_of_ref": "indicator--3d5e1780-14c8-4566-93d2-82a83b8b20b0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9761e0-5908-46d1-825a-2c1c18ab7ad8", "sighting_of_ref": "indicator--f8a09d59-7b68-45ba-9426-bbff01f10578", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae3a51-8415-442b-af0a-110ca6d794ac", "sighting_of_ref": "indicator--2ec22c7b-3a8a-4aa2-9770-789c7742364c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab96f4af-17ba-4fbb-931d-52c6c4b3112a", "sighting_of_ref": "indicator--b3ebcce2-1716-4c91-97b9-820beef80e6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828542aa-fce7-4880-a119-6a040a759916", "sighting_of_ref": "indicator--1ac00cf8-fa39-498f-b36c-7ab3df8308dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0461cdc7-1a8f-41fb-a164-4bf1072fc94b", "sighting_of_ref": "indicator--20102e88-79f6-4715-855a-645396400e8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f02b3f-b636-45fb-8fbe-7fe8a6423e86", "sighting_of_ref": "indicator--78831410-51c0-493e-8838-c91e9954b4c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8416ba36-d620-47ac-aa1d-2b991a86b7d1", "sighting_of_ref": "indicator--5966165e-0c07-475a-9b53-96bc774e63db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cf44dd-2f40-4818-aceb-7d3b2e5a06d1", "sighting_of_ref": "indicator--e02ac057-01ac-4c6f-bb87-1870823e1d24", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4733e11-a41f-4f7c-a8d3-eb6c4a1ba34a", "sighting_of_ref": "indicator--4cccac5f-7190-42a0-8186-cc122a17762b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a328ed3-b42d-4593-b190-a6c203c514e0", "sighting_of_ref": "indicator--d742b2fe-72e7-4156-9b94-a7ad5167d0ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9638ca6-e653-4fa9-a10c-723e34906b8d", "sighting_of_ref": "indicator--0a181b2e-9beb-46f9-a536-59d95080bbea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6db2a4e-6743-43d7-9534-9c997ae40cc4", "sighting_of_ref": "indicator--bfdf125e-da14-42b0-83c1-71b691ffd6d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3b41c2-7a9c-4ac8-b450-7d6b98b38c0d", "sighting_of_ref": "indicator--ae147d6e-8be4-47d0-955c-e2c79e163495", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f475152-22c3-48b6-bb1c-71a7f52bd0aa", "sighting_of_ref": "indicator--e8ae26b5-60e6-41e7-97fa-18343abc7df5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecff1b3-78ba-4aca-b84a-0225dfdad1cb", "sighting_of_ref": "indicator--2249c4b9-45ec-4c04-b4da-0ad5b7074fcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b30d45-c1b3-4308-a1b9-53b981b8e924", "sighting_of_ref": "indicator--084fdf49-a245-41cf-9b45-ba4bfa57a7d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f883d61-adc6-48c4-b379-dffda6badc3b", "sighting_of_ref": "indicator--7e58947d-af05-4e75-bca3-47e5b308e70f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d60fbfb-24cd-4633-b123-9c086b24489c", "sighting_of_ref": "indicator--ce7da1d6-be61-4acc-8f1c-4a2bbff692e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ad18f5-2023-47d3-a2cf-a69926b506e7", "sighting_of_ref": "indicator--b27471d1-af6b-46e3-8427-69e1a562ec93", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d79fc28-1e44-421f-97ca-93a08eab58d6", "sighting_of_ref": "indicator--4610bac3-1b91-4a69-81af-e5d5cfcf2ac2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b8d9cc-e09a-4f73-ba2a-3a5d8b549749", "sighting_of_ref": "indicator--aade5061-9f84-4290-8751-317887b49023", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfa31ef-332f-4467-a809-39eaafa0bd18", "sighting_of_ref": "indicator--401dfc8c-0a0c-4749-b62b-edeb7e8f5974", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e40454-ca9e-429c-ade6-e7150e3dd72b", "sighting_of_ref": "indicator--aeca5c58-88f9-4dea-989d-70ebe14e6c08", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1b155e-dbf7-4d38-9c66-67a290f27d59", "sighting_of_ref": "indicator--8322363c-5866-463c-8fe3-60f0ddce2e0a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5021400-0e97-45aa-9112-da8dd99d6d27", "sighting_of_ref": "indicator--cae5f625-f90d-40ee-bc08-ce99d8653bd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95aca3c-55b5-4319-9f04-0940d2535085", "sighting_of_ref": "indicator--212248e9-104c-4eff-82a6-b93252a8ecad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c12da4-151d-456b-9563-b9681adc79ce", "sighting_of_ref": "indicator--d0f00ef5-9410-403c-8978-730ca2dca759", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50278dba-2171-445e-8f88-52914e1882aa", "sighting_of_ref": "indicator--fec9d545-2a71-48c8-a174-b86a999e94ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493cf967-94f2-4a31-ba33-b61126c309fc", "sighting_of_ref": "indicator--a1ff6580-6934-4e9b-90a3-9244a82ca962", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113abc33-a73e-4179-bfcc-4a3cb7faa9ee", "sighting_of_ref": "indicator--7133d3cd-d17c-4184-bcae-e4a83c6935c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6020dd1-9dda-4ba5-b6ee-2e437d693211", "sighting_of_ref": "indicator--4c6f15f1-3423-45e7-9b7a-99eea067ee88", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a7468-fdb4-42eb-8a8f-2da2dc6d1c95", "sighting_of_ref": "indicator--97ce1b22-1374-4ad9-a3b4-93a3fb03e091", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e330451f-17ac-47c5-aaf8-39964cd40fb3", "sighting_of_ref": "indicator--22319fcd-a455-432d-af37-13df60c14c6a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a186e99-5742-42e0-b485-4a4aa399ec14", "sighting_of_ref": "indicator--d59a61e9-e9f6-49ed-a99b-4c0c125661ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9758b2-162d-4caa-bb1e-d9a5d360d064", "sighting_of_ref": "indicator--cd6faffa-65ff-4997-aa2f-60941e549d41", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526cb284-1c40-48c9-9f27-29fea7e68e74", "sighting_of_ref": "indicator--8dc0d56e-5d8b-43e4-b5f8-c2a5b41a0006", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1418122-0f87-48d0-a79a-7f57c7d10309", "sighting_of_ref": "indicator--aa2dc4fd-2354-4605-bc07-118c09583845", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15784af-f6cb-4994-90d5-d399afa48f11", "sighting_of_ref": "indicator--687b36ba-4112-4918-880b-4bb6af7f36bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178d00de-3241-49eb-89b1-bfbc7099e66b", "sighting_of_ref": "indicator--30f1ac31-7cd0-437e-9778-d3f29fc1b2d6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f019691-2b3c-42e1-9dfb-feb691c3ffa2", "sighting_of_ref": "indicator--de370e78-d34c-4d70-a602-0993c1001e22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc66e75-da0d-44ce-92c0-eb03360c3f01", "sighting_of_ref": "indicator--e0a88604-9d15-4092-8b2c-c5a88cf92bfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1215a3e5-0be1-44ff-998d-05a028c78d3d", "sighting_of_ref": "indicator--e0a88604-9d15-4092-8b2c-c5a88cf92bfb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb1bfca-ffb9-4b6d-9d91-b37e11d32399", "sighting_of_ref": "indicator--0e1dbbaa-7295-474c-818f-c0b7e327d0ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd675bc7-b776-45c1-8979-c3e15d1862e7", "sighting_of_ref": "indicator--ca0aaa89-c0a9-4404-8af3-69a6d1628186", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857c47a4-0806-489e-99ff-062e478a8bdf", "sighting_of_ref": "indicator--0e8e6e5c-7b61-4dec-bc93-cd370867d66d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d3fe1d-bdf7-4a8d-8823-641e8066671d", "sighting_of_ref": "indicator--def8f238-9b2a-448c-9711-feb8ace7d313", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb5d0c3-6c5e-4fcc-979b-40d443299322", "sighting_of_ref": "indicator--e31e7267-6ec9-4df5-99aa-fbca589114c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d492239d-9c1f-4596-b7c1-47a4a358c4c1", "sighting_of_ref": "indicator--2bf00b3c-7614-4368-b85c-486ee76c8b00", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aff14a-637d-4f00-8cbb-f219a009c7fb", "sighting_of_ref": "indicator--8f86760d-1a48-4db7-b489-2f7588723b3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3fb0f1-2114-4393-8fea-b87a51adcf37", "sighting_of_ref": "indicator--08ef5595-fc0d-4a48-b86f-b55fd7ea4bd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763603fb-23b8-40a7-b182-e432d49ce9c0", "sighting_of_ref": "indicator--c8ba81db-7bed-452a-ad3c-d08b4f02f30c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f82decb-cc6d-403b-9730-3ef5db4f9cf8", "sighting_of_ref": "indicator--db8f79e5-1771-4db3-8d05-c45cdd24d2d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7fcefd-9c70-439f-8eda-6f310e56a206", "sighting_of_ref": "indicator--ea9bbba3-ed67-4a95-ac36-d34c5cab7770", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320a73ca-dbeb-430f-931c-fed0ca0146fc", "sighting_of_ref": "indicator--daba9a42-e899-46c2-9817-ac1367e1da18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53aea3e1-f97e-4efe-a0d1-23bde769cb19", "sighting_of_ref": "indicator--ed367964-86f0-4404-8095-0b51a66a47e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61e4914-3509-49ee-b237-ab5ce06781da", "sighting_of_ref": "indicator--1d5b1849-ccc5-48f5-9369-2b11680f7615", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb22d5ac-b089-4536-8a9f-6bb96cae3177", "sighting_of_ref": "indicator--293c3b83-dc43-4641-a138-57c0c936a5cd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982e4130-1327-4030-9a5b-9bd44ce519d2", "sighting_of_ref": "indicator--897a76b2-8b49-45a8-8536-246f717fa49f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618b0783-0d00-4ce2-81f8-0810261b85af", "sighting_of_ref": "indicator--e03c297f-15ab-4426-9d0f-10c7d8055974", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ab131c-2674-487a-be35-10cc9dc10872", "sighting_of_ref": "indicator--7b5967e7-3a44-4377-a8cb-e4de2cd10317", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413ef83e-c537-49cb-967e-03230750ed99", "sighting_of_ref": "indicator--648ddeee-1cde-472b-81a0-1da67f81ce55", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4327608-cd59-49bc-96d0-a4333f61dae8", "sighting_of_ref": "indicator--9e5ce362-adb1-40eb-96ce-2ef6291d8c2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96175a17-aeb9-4c27-9abd-e4a05b2be316", "sighting_of_ref": "indicator--a88f06f2-f4eb-445d-beed-a41510373883", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afebc63b-ce97-48f0-8f29-c6e55d7a9429", "sighting_of_ref": "indicator--a88f06f2-f4eb-445d-beed-a41510373883", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82607b04-705e-4b98-9371-0565f724a837", "sighting_of_ref": "indicator--457ffb6b-43db-4d08-8fea-1efc315be0ef", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a38a9e-dd9e-4022-9729-4b0079bae1b2", "sighting_of_ref": "indicator--de13b397-ec3f-485f-a769-bcf45ec01139", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ddf9d8-c948-4746-b301-5026a69eb727", "sighting_of_ref": "indicator--a1d45ec2-dbd9-4307-8e74-ae52426db4a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aafea2-880e-4cdc-bdcc-33db91f51bd6", "sighting_of_ref": "indicator--da577c44-c41d-489c-8340-d98062d85b3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ba84ca-2f37-458a-95f3-e426506ac5b4", "sighting_of_ref": "indicator--db07aea0-ab6e-46de-bc06-85488b028176", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cac1ee4-2b76-44d2-85f8-f68b6fa8d6e5", "sighting_of_ref": "indicator--39953c15-dde6-4caf-b794-62e14f12d80b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c198a4-c1e2-4c1b-b44f-a3cb6f6f7843", "sighting_of_ref": "indicator--690faac5-67b9-4467-be88-aeb555d0c4c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a07bfb-e05d-48d5-a104-1181ff6883fa", "sighting_of_ref": "indicator--72f262f8-4ef0-4840-914d-37fae31650b3", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f69b86a-f6e6-4c57-b818-b6e4d6416690", "sighting_of_ref": "indicator--3437fd61-64ee-4107-b39f-464235efbaa5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f727271-dd00-4536-965e-f1277f583393", "sighting_of_ref": "indicator--3437fd61-64ee-4107-b39f-464235efbaa5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc22795c-1f3c-4f62-b85f-e0d8a82c0ece", "sighting_of_ref": "indicator--bac3f9b5-bcec-46ea-8132-c9f006ae177d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf39730-8201-4801-be6d-05d406d6b0c8", "sighting_of_ref": "indicator--a2545bb1-0395-4e58-9b75-51c5912d7045", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48fb1b3-c388-4117-93a1-3567ee812805", "sighting_of_ref": "indicator--cf8c6ba0-8aa6-4d0c-80fe-e77794ae4413", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa2b884-6a43-41c4-9138-2f222aeb838f", "sighting_of_ref": "indicator--7d0040a2-33f1-4711-b211-f80600805427", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129ff691-e38e-4b8e-a9ce-a95acacc4500", "sighting_of_ref": "indicator--b23e88e1-e6fa-4cd4-9000-9a48591c7fc6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f276d7a-3b00-4905-be8e-cd7ead249793", "sighting_of_ref": "indicator--e3384bf4-5999-47b8-8f42-ba8b51c815da", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7053d0e-65dd-485c-ba88-d206e8b57c67", "sighting_of_ref": "indicator--07b9ac61-a79b-456e-a4da-21d0e3859be5", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b696343-ad7a-4814-aaeb-08e925cef8c0", "sighting_of_ref": "indicator--b4948c25-4d41-40bf-98f2-013bf0e71072", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfde7fa-4e01-4994-baa3-41571486b750", "sighting_of_ref": "indicator--11b7f8fa-2f39-4abd-a45f-8bda4f87aaed", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc815bb4-546f-4ac6-ace0-16e577e7a5dd", "sighting_of_ref": "indicator--159e27c1-0a8c-4b86-87ee-f5089bf89510", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314a73f3-bdef-430a-b8ab-22dc8b112cdf", "sighting_of_ref": "indicator--b12e822f-90fc-4590-8625-2e9a1b8308d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc35ecf-5ea5-446e-af60-8454fc0a252c", "sighting_of_ref": "indicator--0e70ebed-4ba7-431c-8c85-5a77515f8177", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6b41a9-26fc-40c8-9b41-a0af680868ca", "sighting_of_ref": "indicator--85fd68cf-4178-4814-bd4b-4e7c94fe34f4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67379db4-7aa1-4578-bd41-b0023d740b3f", "sighting_of_ref": "indicator--af85dacd-5aae-4902-8871-92381f61a73b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fd6f20-94f8-4232-8dbc-1bd7240346eb", "sighting_of_ref": "indicator--38b62f96-62bf-462c-990f-f150aa3fe5f3", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304b253c-03af-42eb-bf4d-969c713ac12b", "sighting_of_ref": "indicator--7be61e2d-4bc7-471e-b4c5-f3c272b9b966", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e483f69-4f87-4501-822a-20941049aed6", "sighting_of_ref": "indicator--39cb7b9a-5eab-44a0-95d4-07c14db814d2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb176c5-0f00-4237-a0e4-3b8c55995969", "sighting_of_ref": "indicator--db4b872c-d83d-4969-aac6-def8cd36751c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a141db-ca55-4cee-ac3b-bf9e55026ba3", "sighting_of_ref": "indicator--19014dca-0cf3-4a8c-92bb-ae20fa55df8d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b138d3-4ebd-4a25-b39c-9807d7efe762", "sighting_of_ref": "indicator--4b387a8e-4121-4041-8797-171cc671ea0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d64159d-9b5d-40a0-bda3-fb02d37b27d3", "sighting_of_ref": "indicator--a8237fac-72a1-4514-9fb2-69ac0f6c577b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d0d43e-b755-4f87-a396-09f0332e5453", "sighting_of_ref": "indicator--4b27bf7f-e818-483a-8abe-1463a7819381", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25260302-97bc-4419-a0c1-52c0a22ba985", "sighting_of_ref": "indicator--0a5b6700-c60e-4e18-8603-d1dbb76dc4c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1efe73e-0365-4a23-9f37-79c0ba16d0f3", "sighting_of_ref": "indicator--962d857c-4caf-428c-a24b-d4bb64685bdc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3440d9-51bb-4130-bfe8-bb57e42937c4", "sighting_of_ref": "indicator--72553196-4c71-4a65-b6f2-19706be17bfb", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34707d76-2ebd-4707-adc7-ebb9b6d89f0e", "sighting_of_ref": "indicator--72553196-4c71-4a65-b6f2-19706be17bfb", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f780a605-12be-4da9-8e4f-94900a0f2480", "sighting_of_ref": "indicator--66efe4c1-061d-463e-9aec-378c93aeda7e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad32bd88-d07c-4e7f-b9ab-3700861fd050", "sighting_of_ref": "indicator--86140bd9-8a86-4391-8d5f-992bcab6544e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526bed51-7b99-4bd8-ab90-dd9babd16270", "sighting_of_ref": "indicator--86140bd9-8a86-4391-8d5f-992bcab6544e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fd57c2-9727-4df4-8e86-7d9943ebe301", "sighting_of_ref": "indicator--202aea8f-63cb-4851-b3b0-850bd2bdb4e6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e8490c-1eb4-4059-9ec2-72363ad45f14", "sighting_of_ref": "indicator--202aea8f-63cb-4851-b3b0-850bd2bdb4e6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ac7960-4926-46e9-b6af-b058e7f0dd92", "sighting_of_ref": "indicator--e9846952-485b-4dc3-b443-ab27bb4651a4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d40e81d-213a-4664-840e-da830117973c", "sighting_of_ref": "indicator--e9846952-485b-4dc3-b443-ab27bb4651a4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e34a44d-d752-4a63-95a5-f12143d07873", "sighting_of_ref": "indicator--a616bc85-0818-4a62-92f8-ccb855c42248", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb8363-ea26-4f31-86b6-b81b79bce79e", "sighting_of_ref": "indicator--a616bc85-0818-4a62-92f8-ccb855c42248", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7934202f-8039-4e55-8241-5561d7b6d455", "sighting_of_ref": "indicator--89a7f081-47ea-4b5e-9950-492e41543f97", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009e0bc4-e471-48ef-8b9a-3027fabbef81", "sighting_of_ref": "indicator--89a7f081-47ea-4b5e-9950-492e41543f97", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17ba28c-4c41-49a3-85b8-7945b4c42c6f", "sighting_of_ref": "indicator--6dc2ade8-7831-4941-b544-f1e114ae97b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb2e2ab-af4f-4ddc-a5e7-aab05a9795b8", "sighting_of_ref": "indicator--efcd1a5e-870b-46d3-b117-24074d64b591", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77046d4d-4464-4ec8-8253-2bec454b7268", "sighting_of_ref": "indicator--0069c130-dc2a-4e79-bbde-edd4bbce520c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f40e31-b1ee-497c-ac72-7743b4f91b2c", "sighting_of_ref": "indicator--9004e31c-8131-4bea-8d32-bbf551376cdd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523d72bd-38aa-40bb-81f6-07168dfaff04", "sighting_of_ref": "indicator--4d9e5fc5-2fb8-4897-b5cb-c7aea1e34d4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68167bcb-a6c4-4881-931e-87621084c1ba", "sighting_of_ref": "indicator--23a2d76b-aa29-43d0-8193-43c9a7880c05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18357bde-f5c4-4bdc-a13e-c4ff82dd5495", "sighting_of_ref": "indicator--5428a43b-4052-47a6-8267-1d822889503d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35cce7a-a62a-4cd9-8b2c-55b1d33a049c", "sighting_of_ref": "indicator--58a0d5c6-e099-4708-81da-cd709df65150", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fcf7a7-860a-43c5-91d2-e1100cb4a699", "sighting_of_ref": "indicator--ff987c99-eb39-4d28-9a00-327368b4b304", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e786a70-b353-4578-a3b9-c33d79ccf0f9", "sighting_of_ref": "indicator--91f98520-dc3e-472e-b204-68f624aa3644", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466e9358-6b77-469e-9baa-36d10f30dfba", "sighting_of_ref": "indicator--296c2e47-f219-48fb-a7f2-21628ea67911", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791248ee-f094-4f0a-b91c-805f2e9dc59c", "sighting_of_ref": "indicator--0b65f262-1ab8-42da-8059-9ed3335abe3f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cb312f-2238-43c8-9996-9ead2d8ad8db", "sighting_of_ref": "indicator--689935a4-f1d5-48fc-be23-ac406d1a44b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269f65bb-50d3-4210-8ef0-4b20d7045ba0", "sighting_of_ref": "indicator--86405965-0bf6-495f-8d81-4a5a74309134", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ac9ea9-06b3-452c-aa4b-4be7d0dfbcf7", "sighting_of_ref": "indicator--2498a26f-9294-48a2-9a14-2bf85a3f406e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd77ef6-cade-4967-8e9e-e31fa663dca1", "sighting_of_ref": "indicator--bf9af67f-3054-4aca-835b-20682fda4c40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef13039a-233b-4461-9d3f-3f33a2d9d899", "sighting_of_ref": "indicator--45b05176-8e06-410e-82f6-ab3076f90c14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3bbbb7-45a7-4f54-8caf-764bb2012720", "sighting_of_ref": "indicator--16e0f9ac-9848-4718-9bc7-c40a146d018e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2957ff6-7f0a-4d56-b658-e244fc94334e", "sighting_of_ref": "indicator--8c5eefe1-8012-482b-a6d6-6533d5627e77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dc8d32-7a9c-4117-90be-c1f58cf3a732", "sighting_of_ref": "indicator--911d1e28-82d8-4a01-8b80-7074c23f4259", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d074437b-1932-4421-a19a-29dee8bb80ea", "sighting_of_ref": "indicator--f0ea3a52-a543-4a7d-a73f-c0c4522fc6ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3479d218-812a-45f3-95d5-678a3332702b", "sighting_of_ref": "indicator--a0fbeeeb-800d-4f04-b6f2-8fd89548eabd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f84899-b3f6-46c5-a432-ae991a196e34", "sighting_of_ref": "indicator--3f168ad1-5c4e-420f-8a9b-a96a108896d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24819ab8-1298-4552-b869-1c8de4d6338c", "sighting_of_ref": "indicator--789982fd-fbbe-44c6-b376-5c5043d964c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783daac3-f448-48e0-b31f-d3f1075d45f1", "sighting_of_ref": "indicator--ac47df07-0dfc-442b-9122-e2a8bf6acf8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8021c9-0ade-479f-be82-e6cd510571da", "sighting_of_ref": "indicator--de719268-849c-4136-8e08-12eecf9f07c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f18c67c-fcf3-437e-9da7-2e43d47d30e1", "sighting_of_ref": "indicator--c09914cd-68a3-4974-89e9-64fea61d9f0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea58fac3-ae60-4ddd-a2cb-477ce0c9da93", "sighting_of_ref": "indicator--65a92cb6-73f3-49fa-83cb-188b003122bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577535c3-5a00-43d7-bc77-daf67aa18766", "sighting_of_ref": "indicator--b2075308-7b35-434d-88f5-e9aa5c2af772", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26acb7d6-354a-48b4-bd07-cc05aef75847", "sighting_of_ref": "indicator--3a76b7b2-2fe1-416b-9961-4befeeb7dbfd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39779b83-27a4-4e2d-8e6b-e5402c816183", "sighting_of_ref": "indicator--516b7ade-071c-4ec8-a561-a3745ac658e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96088a2e-0de8-4e78-b7a0-b239f4d66028", "sighting_of_ref": "indicator--63bc4133-e183-4c63-8900-7429b09626d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe2bdbb-7f76-4ae9-88ae-9f6ee1bb10df", "sighting_of_ref": "indicator--f2d812b9-2c66-449c-a3d8-af6779b0a94a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925b9a8b-825f-4490-b465-7eead251df76", "sighting_of_ref": "indicator--dd8615e0-2aea-4147-894b-c535c3a003f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f590e29e-8f49-4dd0-a31c-26db7a373dcd", "sighting_of_ref": "indicator--feccd79c-c65b-40f3-a831-f4af52afcf7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546e9bb3-8a71-42ad-8a37-9f498e7e006c", "sighting_of_ref": "indicator--c268b8d0-bee4-4e18-b260-19acac5ed314", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebaa750-7dad-4c6d-8ae6-c9b57d05c736", "sighting_of_ref": "indicator--183764cc-8364-4336-b5e6-1e8d6835f0b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e94b80-f937-434a-b16f-4781ce3002d1", "sighting_of_ref": "indicator--75a9dabd-1077-478a-b634-86668cdc02ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d364372-9e00-4efd-b382-4080b718cdd6", "sighting_of_ref": "indicator--70530bd4-a49a-42fc-a3a5-616912193766", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec4067e-abc7-4fc3-9919-eab68ce594ee", "sighting_of_ref": "indicator--73c05887-25f7-4741-8604-b1daa187651a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54badb8-321e-40d0-aec5-2639e984e441", "sighting_of_ref": "indicator--d7fc5cfc-dc8b-41c2-9684-a04d34676a76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e6dcf4-5bde-4e7d-91d6-a9dc9e898278", "sighting_of_ref": "indicator--af5547a7-9b6c-44e4-8c24-dd6057c587eb", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe2e0c0-6467-40b9-af7d-f68c4c5c1ee7", "sighting_of_ref": "indicator--5bfb7de8-8fab-4034-82cb-5ff48ace534d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480598c7-085b-4087-984d-3ae01205eadc", "sighting_of_ref": "indicator--950a729d-f8e6-4ce5-a121-7a15738f1d31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c526fabd-df72-432b-b16d-a5e4b679b7ce", "sighting_of_ref": "indicator--abcccfbf-92ba-4e3a-a7fa-0accab1a4edc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95141ac-3ce0-488f-a9d9-67f133e1d965", "sighting_of_ref": "indicator--c9a68890-f181-4fde-9347-1164d8062ba9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a7183-c9fd-441a-9479-0ab7c9315732", "sighting_of_ref": "indicator--c9a68890-f181-4fde-9347-1164d8062ba9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaa7f7f-5d89-4512-8c4f-f8cbed67dd49", "sighting_of_ref": "indicator--e9afaf3d-2cfc-4f0d-a96f-0f263d64c10f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f789c16-4f44-4fe4-99f6-5ad850cbb030", "sighting_of_ref": "indicator--379faf82-44b7-4bf1-99e7-bfb01b129a8b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193ecba0-74ba-4189-9a1a-f3127ab8ee49", "sighting_of_ref": "indicator--7c87d1c4-9274-414f-b0b4-7192e6a1a5bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99d71b-6ceb-4ac3-9a1d-672524608d7c", "sighting_of_ref": "indicator--48d120f0-06f3-4ffc-a338-6eb73e736f13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c1c1d-0ddd-4809-98ef-31e48dc9f561", "sighting_of_ref": "indicator--a20ff63c-3134-4d18-8787-55e58af03777", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d099dbd-a74b-4256-aaa4-bdc7cd1df8ec", "sighting_of_ref": "indicator--32d1601a-a87e-4338-8729-ac55b4733448", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb7150f-d31d-4860-a688-243ec4162c76", "sighting_of_ref": "indicator--8deec469-b3b9-4029-aca0-6eb97b966549", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808d15de-91b1-454c-8ed0-e9742de5e6f3", "sighting_of_ref": "indicator--227645a7-dce8-4b01-93b3-93b20fc480ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b828d4b8-5b7d-425d-9af5-cf8e81e8e862", "sighting_of_ref": "indicator--c991a1ab-7a33-433a-a0e2-a529a34332ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85631de-852c-4ab4-8923-545218766d4b", "sighting_of_ref": "indicator--bc83e410-a442-4b52-a48a-610ba8633eb7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9025322e-c69f-415a-bcee-347f7c482371", "sighting_of_ref": "indicator--7d0b6a57-cdf6-496d-91b3-61e0ad5f8a9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ad2bea-b43b-4b5a-a274-95d474015209", "sighting_of_ref": "indicator--8aa8532a-fdeb-4614-958e-acc7a1c01262", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9feaf43-fc7b-473f-957e-0618b6879a54", "sighting_of_ref": "indicator--faf5812b-f66d-4be6-a2ec-ada9f2d4ef8b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90db7e20-bd3a-43c4-be23-a00ffcc9c6f0", "sighting_of_ref": "indicator--a251c73c-d7ec-4b56-8c0b-3c216e6fca2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e777c9c-5ef2-4f16-bc1b-d02ee5e9879a", "sighting_of_ref": "indicator--8248b0fa-7425-4a01-af00-ca403c86cd10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194763b8-6f8f-400f-92f3-3928e67be79e", "sighting_of_ref": "indicator--6932c898-2f25-4325-b0ab-011b7b39174a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f1a79f-7a17-492a-9e48-2280e4eb9b1e", "sighting_of_ref": "indicator--6932c898-2f25-4325-b0ab-011b7b39174a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6728702c-354c-4dba-b222-8062756fcaca", "sighting_of_ref": "indicator--d6639a4c-e027-4f15-9639-d6a78999af0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5549831-aa62-4bc7-812b-ceca85637082", "sighting_of_ref": "indicator--40e6a098-b3f2-492d-a47b-e361c91667ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79304f08-a6bd-4004-a0d1-17621061010b", "sighting_of_ref": "indicator--d762ab91-a57b-4fb2-a83f-c40d6fd9b2ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4f085a-14cb-4f94-9785-c27ecaa85762", "sighting_of_ref": "indicator--b0ea5bd6-ca7a-40c7-8060-6ec63ad1986a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8530afd-c8dd-425f-8098-bdcec14276ee", "sighting_of_ref": "indicator--3e196196-1454-4e91-8277-7df2a4d6d9b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4055d8c7-5240-4366-bb8c-8da684d73a97", "sighting_of_ref": "indicator--410c55d3-4f14-4cb4-a350-799386f55627", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44dc084-06b7-4ea3-8795-3d9f06a2f881", "sighting_of_ref": "indicator--2ab6ac4e-634d-45ef-b8e4-b33e30da8e77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952a3da4-6ec2-45a6-b50e-b340682f3468", "sighting_of_ref": "indicator--b3d76c82-7260-4641-baee-97eaf97bb0b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ddd784-14e3-48c7-9544-70c58f4c90e2", "sighting_of_ref": "indicator--46ff0631-c09e-4b36-9b9e-b8b1f6c3bc16", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9d4f18-034f-4c39-8f54-1d17e95af67e", "sighting_of_ref": "indicator--0769451d-ac5d-4709-b66d-c26f0f64259c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0477e9-8c47-4736-be59-3f95571b40bb", "sighting_of_ref": "indicator--c76dee4d-84ae-4015-a22a-96a956132bc7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776d6c1-2871-46f5-bb16-164c03b2f96e", "sighting_of_ref": "indicator--8d34aff9-4781-447d-9828-3af3d7ed1c5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b9b7e7-145e-41ad-9efd-a1363bd02728", "sighting_of_ref": "indicator--8d2a2733-c2a5-44ac-8d76-ce1efe38bd76", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64a169d-846a-4efd-9918-d83a25540643", "sighting_of_ref": "indicator--3a3d2c95-b2ad-453a-b501-54ac194355e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f927f48-0c4a-4008-86ac-6f52578f93b9", "sighting_of_ref": "indicator--083d71d4-f2a5-481e-b437-db4424d0591f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f72671-4e90-48b3-a8e0-7c6dce0b055e", "sighting_of_ref": "indicator--6e4f00fd-1cf5-4861-ba06-ae2bb5703f59", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7da357-12e8-4fb9-968b-57bef61c8efe", "sighting_of_ref": "indicator--70eaccb8-ce98-42ec-a959-c4a22ddd7542", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798a2c8e-9151-47f8-8d7a-fed9021b04fe", "sighting_of_ref": "indicator--922be6a7-c72e-4520-a0a2-277f9e6e9d7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e36433-470a-4e81-ab55-73bde9687b9f", "sighting_of_ref": "indicator--4bd19016-e6fb-4a48-aa0b-2054442dacaa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9d0005-93bd-48bc-8231-cbb214879b4c", "sighting_of_ref": "indicator--39a08d8f-2af7-4dd0-835f-109e8451a910", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697116ad-e3fd-4d3a-8ff7-904921d4c2da", "sighting_of_ref": "indicator--abf58f95-3feb-4e41-a2a6-b132143063c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a034574-3300-4078-af5a-117c1b4536ea", "sighting_of_ref": "indicator--ae03b8d3-4447-48f6-a0bb-18e065645070", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16abd3e-3840-4458-9ff9-17fa56075e66", "sighting_of_ref": "indicator--835afbdb-459a-4a9e-8154-96bcd26049b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aafb4bb-da42-4ca6-88c9-547c025ef4b8", "sighting_of_ref": "indicator--6e19f073-f0f0-46de-9128-82189446912d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ec165a-d295-46c3-a970-59d0181768b6", "sighting_of_ref": "indicator--ca1ceb89-f81a-4024-ada2-7e998a7751d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8d0f69-edab-440d-b93b-6f43d4846fe1", "sighting_of_ref": "indicator--2df092af-b288-49d1-9bd1-de8e5db805ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3522cca3-32cc-410e-b6ee-29cb435b5da8", "sighting_of_ref": "indicator--e024f6c6-ba7f-49b1-a5af-86d77f7cfa9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e846ec1a-8ef4-4006-9b89-7558ab2d7c46", "sighting_of_ref": "indicator--454c2221-fef0-490a-9dff-2b45bc789582", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b597be-4611-4db1-8c03-44996989424a", "sighting_of_ref": "indicator--69fc0c45-23c4-48dc-9f0a-f05889cf841f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e196ac-5eca-4ce6-8347-de0b4131cc33", "sighting_of_ref": "indicator--be99bc2c-92b1-43e3-a267-d4b8d974a006", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a050509-9c19-4362-87db-12bb4942a1e0", "sighting_of_ref": "indicator--6a0476bd-83b2-40ff-90e2-2bcf1d079899", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb10638d-2821-4b69-b7eb-c393f7f4577a", "sighting_of_ref": "indicator--373aa8bf-6e5c-4de9-a653-592944a3622c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d680672-225e-444f-a110-3b0ea7289767", "sighting_of_ref": "indicator--d37043ac-6c57-4569-9412-9a9eaf9ae011", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba56227-4b0c-45ea-9adb-ec5537c24036", "sighting_of_ref": "indicator--e96f637a-f2e2-41f8-ad9c-cb9de18c1afd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fc1ee5-1201-42c2-856d-e61803a592bb", "sighting_of_ref": "indicator--310f4e91-2da3-4f23-8b0c-f73586b80454", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0aaa8e-f3b9-4f2c-bd18-7d7b6b6b1790", "sighting_of_ref": "indicator--9d529dd4-90fd-469d-90ed-c6bec786d639", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5519afab-8c1c-438e-9479-88b3369b44a0", "sighting_of_ref": "indicator--4b541b5f-9056-43b6-92d6-8cb17830d690", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41de9b9-210d-436e-a581-6e6ed3da076d", "sighting_of_ref": "indicator--c4d38a67-41cc-4844-8246-d15221751db1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d634784-5eca-404d-9b86-adf90793956c", "sighting_of_ref": "indicator--7e84c084-fb02-435c-ae97-c4fbd617c8e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c747bf06-ff4e-4eee-a3c3-1cec3541c16b", "sighting_of_ref": "indicator--a524d581-eea9-484d-a2e0-4a141d746171", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657cebbc-070f-4df4-a778-5119d8f6527a", "sighting_of_ref": "indicator--839a396a-19f0-40d3-8f05-8c2764b3aa9c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545bd850-e54c-4842-853b-a1b14b3d9809", "sighting_of_ref": "indicator--2d61db52-918b-4f80-94c9-d289ef97481a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6b8813-7163-4584-a3eb-63d88f8ab090", "sighting_of_ref": "indicator--da731a65-865a-48ac-bc88-7a1b51b0f280", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eab53f6-297b-4f03-a5f6-cc856440af98", "sighting_of_ref": "indicator--d231845e-c287-454d-a11e-7f7218e22d50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6143e2-b5c7-444b-9f3a-d886550b7f18", "sighting_of_ref": "indicator--5844ea98-5660-42c0-8780-94a2d28fc995", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddcb1e9-6b12-4324-bff2-a750db513846", "sighting_of_ref": "indicator--10ae70b8-4b24-4fbf-9a80-28b36a720923", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2202da-2a8e-40ca-8293-8a9f7885c2a1", "sighting_of_ref": "indicator--88c278e9-f7a6-4aeb-9172-eaf668d3c1eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cf7e9c-7474-411a-8a2f-3a4d5796da44", "sighting_of_ref": "indicator--acba5ad2-2a57-4c63-b74f-b743fc383cd5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dc37df-363d-4064-befe-36142ce9b73d", "sighting_of_ref": "indicator--d386c2c4-c278-4206-bb90-962efdbd5de9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a4a96-228e-447e-9040-d0217cdcec49", "sighting_of_ref": "indicator--2e826176-d8cd-4696-9cce-983e34a7ac9d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44121952-9950-4e50-8ccb-67c64cea431d", "sighting_of_ref": "indicator--a40c21dd-78fa-4ee3-b042-7bdca1f97736", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f42227-b7b5-4b21-af12-1e355c483ae3", "sighting_of_ref": "indicator--bd6ab8bb-43f9-4ae4-a3e2-90d2e2918580", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5975e1a-7a39-4b8c-8090-f61d57b82e6b", "sighting_of_ref": "indicator--52717ad0-2504-4db5-b586-4ba7788c5b22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b99275e-7e86-45df-abbc-411cba5fc556", "sighting_of_ref": "indicator--76906cd1-829e-40b0-9cb3-b8a09f882ca0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fd17ad-bbae-435f-a35c-55cd866ba517", "sighting_of_ref": "indicator--aa0316a4-240d-4b67-8d7e-01be50e0f36b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2bb909-ffd6-44c1-8dab-8c2793f02ef5", "sighting_of_ref": "indicator--fdad7970-5d6f-45fc-bada-6595efeda4e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb20d9b-cd31-4a25-a418-58ef231d98e5", "sighting_of_ref": "indicator--8c1ed3cb-00be-43fd-b802-8b85a1667985", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9514a0db-1b2e-450d-bac2-ac5ef70e93b1", "sighting_of_ref": "indicator--507017b4-713a-44f6-bb24-7ccfa2a0a795", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026a720f-2f8b-4b50-8186-bd7d2f4a272e", "sighting_of_ref": "indicator--adcce520-936a-4884-839e-6f26ef084c67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2b62c6-cbfb-4741-8d89-068d3bb05200", "sighting_of_ref": "indicator--0a60eb8c-c973-4b4b-9637-b708ecc5bc81", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56827f5d-1017-474d-9fd6-5bae5db3d162", "sighting_of_ref": "indicator--1506584c-afd0-48a2-8594-cdda8b2fe867", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015ee723-5961-49f7-a958-a0b13bd02104", "sighting_of_ref": "indicator--ba7de3d4-901b-4704-9502-958c6110574a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a802f39-bea9-427c-bbc0-bba429aed94d", "sighting_of_ref": "indicator--9ebe5e80-407d-47cc-9dcf-989129c12031", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edade832-68d2-46aa-908b-44becf34b180", "sighting_of_ref": "indicator--2c251dca-202c-4a54-96c2-7e7ade3be266", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c339fa8d-5cb0-4aec-beb0-eb3e9108de41", "sighting_of_ref": "indicator--937521b7-41a1-46bd-a4be-bd0f345ddcf9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cc97f8-6a41-4ea5-849d-3c63c6f24fdf", "sighting_of_ref": "indicator--bc5ba801-0443-47ee-9461-42756ae2a346", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c003f03d-3e98-4ebe-9a17-64198bb430cd", "sighting_of_ref": "indicator--c5466be8-da16-438c-8b17-2b7b99f6f532", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da3c33-f18f-40e8-8a5c-6f94fed0e7ca", "sighting_of_ref": "indicator--cd165650-54b3-4d29-9314-ec843e66161e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d5bf78-353f-477e-90c1-43d91fc7d06b", "sighting_of_ref": "indicator--2ce9e080-cf4b-4792-854f-8bc1549e97de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abef24c5-7eee-4c5b-91c9-27ea9720c1ae", "sighting_of_ref": "indicator--3be99d9d-0126-4554-ba6f-7e2792a952de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52089ff5-1142-4606-8c38-c56bbdbec155", "sighting_of_ref": "indicator--b8067cfc-2f7d-4007-8b6d-341eab9e398e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd98e637-93e8-4cfa-8b2e-3f04be4039a2", "sighting_of_ref": "indicator--fca36eb8-706c-42de-ae8a-0baf5b546308", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2856ccca-b5e8-4811-bed8-05e72a1166ae", "sighting_of_ref": "indicator--b2d7e239-1919-4aed-b302-8877895ad714", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8163f10-0cf7-44e9-96d5-43400e15d7a8", "sighting_of_ref": "indicator--5cfab630-3723-4219-9f7c-1e570dbaa8de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0702333-dcb5-468c-b86a-d67d229e033f", "sighting_of_ref": "indicator--6c7e0387-f511-4046-810c-be5ecb4fec9c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964a1ab8-67dd-45c4-a5b8-0d885654e145", "sighting_of_ref": "indicator--9a6d8d6c-c1bb-4796-8112-8392081d675f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96edf98d-032f-42a1-9b37-d6d15078bfe6", "sighting_of_ref": "indicator--da3bf800-f1b9-4bc3-ba37-78eaeabb88ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b74072-fbfa-462a-9fe3-45be225f23de", "sighting_of_ref": "indicator--c4c25d33-f517-4a53-99f8-da11b2561726", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46a29f5-6573-47f1-850e-8f155d18ff9b", "sighting_of_ref": "indicator--e5a819b3-ade3-4d3b-a635-85f8f42a6da3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f411bbeb-8911-4ca3-a996-c372ea492973", "sighting_of_ref": "indicator--3f4e8444-96b0-4e4a-b6c8-da33064f8c01", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721d66da-f4c2-4c89-97e2-ea9fdeab05b8", "sighting_of_ref": "indicator--83420005-8f38-4f6b-8907-8a5732bd9002", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c232230-58b3-423d-a5b5-b1a091e3e28e", "sighting_of_ref": "indicator--642e2393-7f73-4242-b9c8-e306a7f5a711", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91f8232-1cf0-4504-8d0f-37a9147c0363", "sighting_of_ref": "indicator--bb9c8292-f475-4ead-accc-ffdd6ac7d510", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c052e4-f348-49c2-9a32-700762c07f8c", "sighting_of_ref": "indicator--3731286c-5620-4555-a7e9-4b672538e652", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f72cfb0-b406-4860-94d0-5d909f15f8f8", "sighting_of_ref": "indicator--a0029315-5ce2-4e72-a41c-b59d0ed4342f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4bb129-01c3-4a3c-96dd-fa6b07caa726", "sighting_of_ref": "indicator--774d57e4-d09b-439c-9c3f-868fa4d8f4c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5cdbe1-6a75-4a55-b7f9-179c26135732", "sighting_of_ref": "indicator--1595dbfc-55ff-4dfb-812d-042ca9177566", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6b7fdf-a488-4ca2-a27c-5f2fc7034bb1", "sighting_of_ref": "indicator--7c24dc95-79aa-4602-bd25-af42ff1b9d94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dea3e8-b66e-4340-a3c1-46928609a397", "sighting_of_ref": "indicator--062f4799-4b98-4a12-be4c-60441f1b9aef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571dd48-0398-409f-bcab-6f2f5dc07765", "sighting_of_ref": "indicator--5a5ce776-0e5e-46a0-8db6-ec80e552e870", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e5b824-0e49-4ec2-ac50-08274946fc97", "sighting_of_ref": "indicator--733b666f-3023-4174-813a-d4d49e968268", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a497b8-e887-4482-8047-62482c99269f", "sighting_of_ref": "indicator--733b666f-3023-4174-813a-d4d49e968268", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcc9788-3976-4642-aa40-cbd9f4f94b5a", "sighting_of_ref": "indicator--ad4ec4ac-edcf-4ab9-8645-b79f5826b3be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b9385b-2dfa-445a-b977-884ff093add8", "sighting_of_ref": "indicator--e6426e5e-e890-4a9e-944b-284a52be0c88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d06770-953f-4c50-8505-a3a72d5f0b9d", "sighting_of_ref": "indicator--803d573c-81ab-4244-ae25-27bbb2e8bb8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c331815-beae-475e-aca1-7522d9f7b256", "sighting_of_ref": "indicator--67995fdb-8dfa-412e-ac10-660474e9bdc1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2acb0c-5c03-4ded-b477-7630ac495070", "sighting_of_ref": "indicator--01c35d4e-05de-424e-9be8-dc27286bdf4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0d2632-7eac-4607-90db-5f20234e9cde", "sighting_of_ref": "indicator--911a02b2-13fe-4c9e-8185-aac27e3400f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f14656-e871-44ed-9274-f43161d0c662", "sighting_of_ref": "indicator--d1569487-9c8f-409e-905d-30496bca199c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781d2c4e-bcd6-424e-a483-9bdd407cae16", "sighting_of_ref": "indicator--8d4491eb-dbe5-45a7-82f1-27230fa69e7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d0c389-8cb4-440b-86e9-a7639306f47c", "sighting_of_ref": "indicator--46a4974d-a73a-4bc6-a28d-cfa3a4fcace4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b377621-f528-4272-bf93-9b2b57ef9e14", "sighting_of_ref": "indicator--a65aa48a-3a1a-447f-b147-7587a0540a6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2ff179-1898-42df-ba6e-0abcded32fc3", "sighting_of_ref": "indicator--854d52b6-44e1-4b38-85bd-780cbaeba5f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d01c8-8761-430b-9369-838d2e662068", "sighting_of_ref": "indicator--59d56574-66c4-4bec-9407-1adf2ce179ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dabbb0-ac29-4c18-b753-2e2e5389d503", "sighting_of_ref": "indicator--e5452633-b815-4bd4-969e-18915431151d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc7d63c-5db8-490a-8cd3-8189c2684ec5", "sighting_of_ref": "indicator--d20744cd-840a-42da-b206-41a293e1ecf4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911517b7-f46e-4b76-8744-3c327e7d6b49", "sighting_of_ref": "indicator--7d1838a0-50ff-4950-86d9-10618bd955c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9366a1-eee3-490b-99a1-b730b4722b20", "sighting_of_ref": "indicator--ea06ad92-4e59-4dd1-bfa2-8c700bdef875", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a51c2-7cec-486b-b365-bdcf9fd0b5cb", "sighting_of_ref": "indicator--89b798ce-436a-4b3a-be7f-da8f76ad8350", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2caf72-1c2d-45c4-a91a-5695efc86ef6", "sighting_of_ref": "indicator--7d102f3c-acea-4703-825f-24917b6aa143", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd24f085-a707-49d3-84a7-39d4807f81aa", "sighting_of_ref": "indicator--77bbc5e1-b8fb-4410-a326-d476fab40d2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9920b193-cdf9-4682-aa73-8c2795f2952b", "sighting_of_ref": "indicator--be9f073b-19e6-434c-8539-7beddd113c76", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da3c421-14ce-44ab-9b67-0e94066703c7", "sighting_of_ref": "indicator--069a3776-67d0-4aa9-8d38-524a2415c14a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45778842-0679-4099-ad9e-2a26987883f0", "sighting_of_ref": "indicator--f4530284-9b0d-4a2d-b94e-1c0829de1796", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5730254-ef5f-463d-9dbb-a7916d15cee3", "sighting_of_ref": "indicator--aae30ee5-e91b-43a1-8966-d1712ba8c051", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b726bd8f-e87d-4e41-a439-3238679981ff", "sighting_of_ref": "indicator--d737c134-0344-43b7-8782-f4497213ab03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6ff189-b9fa-4ed8-af08-6559de548d69", "sighting_of_ref": "indicator--98a2b31d-fa10-412e-87a7-2f7db7b9f56d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34efcce8-85b0-4261-84fa-6b55bf13f561", "sighting_of_ref": "indicator--aacc2543-e9a2-4d0c-959c-289d0418833b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365e867d-c8f6-40e0-9596-6d68c7136d47", "sighting_of_ref": "indicator--2a4eea6e-cf36-4a1c-8b00-1b4002baddc0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0177014a-f617-443b-8588-266c9fb37a0e", "sighting_of_ref": "indicator--357c1c97-466c-4404-bd48-9b14cb039f7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7729fd-d0c3-4d79-b308-ef87c3493a4b", "sighting_of_ref": "indicator--6ff227bf-a834-4d4f-a441-a6ac549cbb29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6b7515-8580-48db-b572-a62ffbd6a874", "sighting_of_ref": "indicator--f5333edf-75e6-40a1-b823-066413e17abb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f570ea3-3f78-4b79-ab5f-520e2deae531", "sighting_of_ref": "indicator--1f54156b-0d34-423b-b464-1ea0a6ef7a9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031dcb89-5059-4cf3-b056-bc0802558e95", "sighting_of_ref": "indicator--8f9d60ee-1117-4f01-a803-650e2070962a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ba9e71-943b-4731-80d8-ede1959f15ae", "sighting_of_ref": "indicator--a7bd9d59-aa1c-44e3-8485-8d8c35008b06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c41b47-8c7a-4baf-85ef-616a16a2b6c2", "sighting_of_ref": "indicator--8cae7bbe-eb28-4c9f-9d2f-2c9795324b75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79a5cdd-b29d-4682-9324-055ff4555758", "sighting_of_ref": "indicator--f3aeaa40-b085-47dc-9110-4b18f8297e04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa67d4aa-d194-4ac3-981b-fde45cd181ad", "sighting_of_ref": "indicator--53691f9d-04b5-4cd5-8e07-545657374c57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5eeb15-d6e3-4a0b-9d73-fdc73205a0e3", "sighting_of_ref": "indicator--147768ea-dbff-470f-a172-c4e79d760530", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c75e87a-382f-4891-80b8-905a00ba57a1", "sighting_of_ref": "indicator--5306b4dd-8981-4391-9908-4544bd6ee878", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e810b7-deaf-4eb3-b0e1-968193b3963c", "sighting_of_ref": "indicator--53da6cd3-4bf5-4983-9c36-1e3053249a31", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393d8a2b-4aa9-4c35-96b7-da2ab7769abe", "sighting_of_ref": "indicator--04d705aa-ff63-4afe-bd38-befb38b0782d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aba628c-6096-4600-900e-1ba3c88f3a0d", "sighting_of_ref": "indicator--73dbce2d-8caa-4dc9-801c-c63c18f6e6ed", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d267186-ae46-4ab3-888b-35c26162aace", "sighting_of_ref": "indicator--73dbce2d-8caa-4dc9-801c-c63c18f6e6ed", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5409d0c1-73ca-49f8-80da-386d5db48a57", "sighting_of_ref": "indicator--b1ef7dcd-5174-4838-bed8-d413edf8504f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf2536-0237-4474-9dd6-263d801965be", "sighting_of_ref": "indicator--140970cd-9518-43b7-a789-3dbcf40dc1ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a828896-c1a3-4907-9a56-c468c461727d", "sighting_of_ref": "indicator--107477a9-f058-46e3-8b18-9126c1bb7c5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6845d371-a4ab-4273-8caf-c8b9fc02e8fa", "sighting_of_ref": "indicator--e7918333-22fd-494f-b42a-0085c66d4631", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c337fcd-2e67-42b9-a347-97763d5387e9", "sighting_of_ref": "indicator--ede25b03-771b-4bd9-868c-e3400dd6f248", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1dbd8a-e6c1-4655-962b-42f6d3ec4336", "sighting_of_ref": "indicator--c18b8676-a455-41c1-b12e-caa6c0f5140b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8341979-cf9f-4bf8-91fb-d0bd65c31549", "sighting_of_ref": "indicator--84f40c78-b8f3-4b56-a085-86bb8ac1b3f9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e88e62-494b-40f7-b291-ef2596f45184", "sighting_of_ref": "indicator--3ec72d4e-6ed0-4242-8d9a-685bf528c42e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edc9cc8-eb40-4cea-87cc-6ce25ecc760a", "sighting_of_ref": "indicator--9efb2b74-1bc9-4c47-afe2-e0ad9e88109e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6afcd1-0661-4202-bd89-08f96738a894", "sighting_of_ref": "indicator--0a6a454f-89fa-4f08-8aa8-ef238ec43586", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b651dd7-b2c0-4348-be27-da592e632627", "sighting_of_ref": "indicator--3e39cd51-db4e-4bd8-86a3-36363af48ec3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d83befc-1ad6-4217-9717-e14dea3eafeb", "sighting_of_ref": "indicator--e54445ea-9b15-4568-ab89-572a166708d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f25f3c-e3bc-47d0-b6c5-38be978c8d95", "sighting_of_ref": "indicator--c086c2da-d746-4c1f-9613-a06d6b0a0559", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc74494-ba86-4ce1-8d51-3a659af458d2", "sighting_of_ref": "indicator--4c2ede06-ecd3-4e4e-9e3e-40eb336c6a07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b37fb3-c546-47ce-a38a-4ed43ec6b9b4", "sighting_of_ref": "indicator--9b04b18d-1707-49e5-a15d-ce4bc69741a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aceb5d7-40e6-4610-88d7-fcd6960b7b70", "sighting_of_ref": "indicator--5bc5964e-3dd0-4c9b-a798-0c539dc612f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fbe104-c252-4039-9e31-0137cd755aea", "sighting_of_ref": "indicator--c4a2f148-c525-4993-b506-9db63b5cd306", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698a8304-0741-4604-b0b4-e8068f344199", "sighting_of_ref": "indicator--b21cc6f7-eccb-4f1c-ad00-0026d3b96d4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc983c1d-b31f-41ba-a01f-1f010649ad80", "sighting_of_ref": "indicator--22cf890f-b181-4917-a598-607ca83de37b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5271d0e7-63ef-4651-bbcd-90434d1972b5", "sighting_of_ref": "indicator--0bf5d075-12d6-4ab9-bcc1-ad9f0c17eeb6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74aa35b9-c50b-494e-a119-14daf3ca3d53", "sighting_of_ref": "indicator--11e4be3d-089f-4d9b-8e18-9b43fda11c0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232cde4-fcd8-4201-8cc8-1bf4ca811d40", "sighting_of_ref": "indicator--f05a8bbc-a840-45f9-8efb-b2db7e30bc2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7f491e-fb81-4069-8c27-201a0af8dedb", "sighting_of_ref": "indicator--70239443-d303-48ed-b49e-f979c271e864", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d720ae7f-6e75-4177-853e-c8c97040e070", "sighting_of_ref": "indicator--ba97ef3d-d622-4874-91e2-98355e10b546", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3452144-d737-457d-a55b-a0445adbf1b9", "sighting_of_ref": "indicator--d520d786-4c3a-4372-8665-26053957f3fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883e5e90-1417-45e7-a383-9142a69381aa", "sighting_of_ref": "indicator--32b93cfb-bd96-40f2-b2d4-45cd1302ce8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6368b97-0d1e-4f14-bc2a-5367d20b84d3", "sighting_of_ref": "indicator--7989ede3-3b36-4e92-8b8e-68b959f0c625", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d830d68a-006a-41a2-8a98-389542aff085", "sighting_of_ref": "indicator--1c8078e0-2aa4-4285-af65-afd8deec7e01", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac85aec6-c15f-487c-b574-7e35ff5bbe36", "sighting_of_ref": "indicator--2cd794e4-8a8a-477d-88ba-dd1aef24844a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25680f29-6541-4ac2-a8d6-3e50e081a1e1", "sighting_of_ref": "indicator--fbf817e6-52f2-4316-92ba-8bdd9ab93523", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c4a0be-5461-424b-a1dd-ee4e5503997e", "sighting_of_ref": "indicator--26071f89-571f-4642-8792-8a2856d86777", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e2f21d-e57f-44ce-9261-409c3f564588", "sighting_of_ref": "indicator--4381d7c6-444e-49b0-b6ce-44144937cb6e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2051e8dd-d551-4fe5-bc31-8e6389891d1d", "sighting_of_ref": "indicator--6415c55b-765a-4614-abcd-b7d822576be1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa78e96-5242-4c62-8ac9-7f79f34658d0", "sighting_of_ref": "indicator--949e53ca-3cf4-467a-a956-345bdf9c16fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a7c7d-28b9-4cdd-a6f3-b89ad45f6e23", "sighting_of_ref": "indicator--99f0d868-55f4-49bf-ada1-92883b2166c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d80602-8c88-4f19-bfbe-c6a7a57598da", "sighting_of_ref": "indicator--330ecab1-9d8a-46fa-b51c-3bc3114ec3a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe4ad2b-d057-47d6-923a-743ecd3d203d", "sighting_of_ref": "indicator--12e64d36-c09d-4bf6-b9b1-6646f3ea56de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5882df2-168b-4350-b99f-6137a478956b", "sighting_of_ref": "indicator--5c592a01-11b4-458e-bacf-b2c89b187def", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7462df30-15fb-4bd1-bff3-8ce1e7fc03b2", "sighting_of_ref": "indicator--4f37ae8b-10ae-4a74-9785-083105e74460", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbb6695-e9af-47ed-a084-614fbf297637", "sighting_of_ref": "indicator--615b70f5-941a-4fde-8f09-72c56c1ab25b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab92a2e-9cea-4d79-9d88-fe034cf97aa6", "sighting_of_ref": "indicator--fa93f51b-b5e2-4f8a-8c87-0653b0e6b181", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0f4f9c-020e-4b80-818e-fe914d4bbc31", "sighting_of_ref": "indicator--6f0ea391-6013-4ed7-b753-f640ec4b54e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be5fd0a-3bfe-44cf-90a2-9b7a4bbc73a8", "sighting_of_ref": "indicator--e8ee84d1-9ec7-44ee-b994-820ad262d799", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082263c2-3324-4014-9bfa-d653b276638c", "sighting_of_ref": "indicator--41e1ccd3-66b5-4fad-8f96-af593b3c65ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f250937e-1757-4b8f-ba49-a120c3efe766", "sighting_of_ref": "indicator--d588085e-8e1a-496f-a48a-5178080df199", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddc5081-4fdd-44d9-82de-6bfdf5e98860", "sighting_of_ref": "indicator--44f7fe45-d520-42d2-9474-13d9bce98e09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06393a24-c683-4b24-b5aa-e61f7023d66e", "sighting_of_ref": "indicator--370be153-e344-4fae-a206-a9927a550234", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e026807-c1b5-4732-9717-1b0426d1096f", "sighting_of_ref": "indicator--b655319f-8224-4912-b017-2bf10b6cf0e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a189f0d-3718-48f0-8a94-781e22084c34", "sighting_of_ref": "indicator--67c2c9cf-752a-40c3-a5ea-bf3526d518db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c005da-6c73-468c-9e8e-ddb205f3f45b", "sighting_of_ref": "indicator--74f0a8b1-d1cb-4bc1-b93f-834846d58f4a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8903f7f2-2e5c-43cb-8731-520dfcf6c969", "sighting_of_ref": "indicator--44197b9e-9a57-4620-8e2a-e1bd4972c5c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88395289-8a0d-42bc-aa62-26ab8a6d116f", "sighting_of_ref": "indicator--b0560712-9d7f-4704-bc6e-c7fe11ee52dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f120b9-cc3f-4718-9a24-8d8db76aa94e", "sighting_of_ref": "indicator--eb86e281-c22e-4300-8434-66e5959f43d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878fbc9-ef9b-4f80-a01f-0e9ad83aeb95", "sighting_of_ref": "indicator--2176a736-c243-4a21-b74f-c2c9cded3fcd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d196ba-22ed-44d8-80ec-3c9fdf572b18", "sighting_of_ref": "indicator--0ac9a7d1-af5a-4df6-9e8f-306df38b75f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a770ec0-ed06-4c20-9a9d-5c1eadfc3045", "sighting_of_ref": "indicator--57f3761a-5c61-41db-b64d-1cadd14ab722", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c155cedd-051d-478c-adf8-eeaf3378a818", "sighting_of_ref": "indicator--ebb524cf-de2c-493c-9edc-e6c440eca5a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fcdc0e-ef79-4f17-90fc-59a7fa323091", "sighting_of_ref": "indicator--129c74f8-33d7-487f-b673-f2449f2a00cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae9734-dad9-4447-be77-f38bc9d88887", "sighting_of_ref": "indicator--6447f70f-862e-4321-8f2a-90a0ffda772d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8829c21-d7cc-4aae-b30a-84662f5e1a4c", "sighting_of_ref": "indicator--ba573102-cc77-45da-90b2-0d8174d684d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c3b0b-5119-423a-ac73-c9df2b205c31", "sighting_of_ref": "indicator--f8c5f815-a96e-4166-963f-9853cf784f3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc39a66-1745-4344-ba90-55d59ff98a74", "sighting_of_ref": "indicator--8138250a-ee10-45b0-a231-88ada457cc0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e3e4bb-7c24-44fa-a8f0-c6dc6267599e", "sighting_of_ref": "indicator--05267d8e-5366-4c41-af0f-dd723ab10d12", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924cb20d-1d7b-43fb-b80e-f536fcc8f44a", "sighting_of_ref": "indicator--998d0d07-296d-4104-ac44-4e7207cb5fab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1141aab-e4e6-4815-b4f1-230cd3185a14", "sighting_of_ref": "indicator--68a2b2c1-7dd4-450b-888d-76c4891522cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268460c4-52c8-4a39-9dd1-4e49bba78463", "sighting_of_ref": "indicator--bc48fece-c8d8-4deb-9282-15842d608d48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feef581-6694-4772-a6ce-aa4cadbcf6a0", "sighting_of_ref": "indicator--4afa09ff-d75d-4f15-bdf0-422d89517d86", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f2ef16-b432-410e-885c-a180c791ae39", "sighting_of_ref": "indicator--b8dc97be-debe-492d-b8af-e2e8cfb653fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db927f57-ff33-4fcb-9dad-6e039765d2ba", "sighting_of_ref": "indicator--5b1897e2-6dda-4e54-8d3e-48388a737dbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d0ae34-f07e-42f5-ba16-353b14618503", "sighting_of_ref": "indicator--d9dfb4fe-b912-4e7a-8549-b38d08cd3f9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf2d143-6969-4351-bb89-2a1b7d9a24dc", "sighting_of_ref": "indicator--37bb0c0b-1695-4758-a6de-83e99b57a941", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b372f4-f818-49a2-b280-e9f7a3a08923", "sighting_of_ref": "indicator--025af6cb-568f-4281-adb9-6661b6b86ffb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cc1502-97aa-496c-80a0-53aaa17ccc52", "sighting_of_ref": "indicator--37fa6de2-2592-4064-b03d-2494c45d1e0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7dab06-f0ed-413e-a365-0fb5cb924145", "sighting_of_ref": "indicator--5a80ca99-c67d-4893-8f47-522e4934f380", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea4243f-eb9f-4c68-9fe5-192fa391d846", "sighting_of_ref": "indicator--469e0495-30df-42c1-9d4f-25f87851822d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebc1ada-e161-496e-af72-7df7b3acb663", "sighting_of_ref": "indicator--a60476a7-eea3-4126-87f0-38de9c5eba70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2750f8cf-55e7-4571-ba2c-956c532c2392", "sighting_of_ref": "indicator--b7eb1c29-3da4-47b0-af82-36003f3d9553", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7069a70-dd3a-4c8d-babf-6dee122cef3f", "sighting_of_ref": "indicator--7e192833-70e8-48fd-a302-7ef45382107e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce785b7-26cb-4dfc-aa6e-f970432d20da", "sighting_of_ref": "indicator--40987b5c-f445-423b-9207-de1f292b4b07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864fc3f4-bbbf-47d9-a104-f16ff33fa411", "sighting_of_ref": "indicator--26243781-9b7b-420e-8272-677f0bd474b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9f9999-b52a-4720-b132-f917911527cd", "sighting_of_ref": "indicator--04979032-63a9-4261-b7ad-be756a86f275", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89da38b4-2e13-43e4-9963-85e8b8893fa1", "sighting_of_ref": "indicator--39133f89-e13a-4d02-9e09-d628626cf7fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6e44c-68ac-43f1-a87c-88ee2fa477b0", "sighting_of_ref": "indicator--0d097a64-0a75-42f1-97f1-06352e7286b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de067dad-bf49-4156-b8d9-910b72c6c5e1", "sighting_of_ref": "indicator--789b741c-4317-462a-be12-15d7d6f9b9de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41af583e-0e85-4a93-82ae-68800b81599f", "sighting_of_ref": "indicator--4bcf936e-b09c-45d5-b09d-da1635ba6b4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa794e23-aae8-49ed-8e3c-0affc8c2dbbd", "sighting_of_ref": "indicator--e9727311-699a-478f-90a4-0141ce2f588e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1025a4b5-0d01-4917-987a-f0896c372d14", "sighting_of_ref": "indicator--81ca2cfa-0de1-4eec-adeb-a331c517f59c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc83a9-baf7-4c34-95b7-786d51a9da59", "sighting_of_ref": "indicator--c9e0e1b1-20a7-46aa-a58c-1b22cd557b7f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5992b2-c7a6-4ce7-a1ca-0a74b2d2f2b7", "sighting_of_ref": "indicator--4638e0bd-259e-42cb-8f26-31b0a0ebc654", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b35cb9-72e9-4fae-99ed-80ebf4c9ed5f", "sighting_of_ref": "indicator--39921875-5311-419b-821b-d98cd8994cb0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae278b-cb82-4ad7-a55c-6ef45aa4025b", "sighting_of_ref": "indicator--bad38a14-9037-4b90-9ca9-68ff6987ef35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a7775e-f9a4-4c06-848a-5edd58f90553", "sighting_of_ref": "indicator--56c70c0f-c00f-4046-9c2f-a20c61a896e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8ef712-9d69-47c8-b733-e4b3922650ce", "sighting_of_ref": "indicator--35d124ed-7a0a-404f-b044-0d0e49a7c89c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ffdc8f-2d7e-4a40-b3e8-bd0de22c390a", "sighting_of_ref": "indicator--5cc013d6-7a2f-40d0-a768-1ceeca4cf767", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d8d55d-09a6-4b4e-bb70-23bcbf35988f", "sighting_of_ref": "indicator--c50601ae-dfc1-45e9-ba49-44eb70cc4373", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5e3def-f4b2-4095-8343-60187b942593", "sighting_of_ref": "indicator--22978bbb-3baa-4bc7-9f9b-5e6a593abb17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1b7e82-32d2-429a-91eb-76291e87781f", "sighting_of_ref": "indicator--23c3093b-cfeb-40f4-9d90-fed279c0594d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2332068-9862-4368-b7bb-964195d98201", "sighting_of_ref": "indicator--a1cdcb7e-d1c5-425b-849e-3c7570a85a9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2707b7-c8c8-4119-9504-54f5a61d9caf", "sighting_of_ref": "indicator--f884d934-33e0-4c40-9b80-80821935e359", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6d0d18-5600-45c4-bed8-efc07e74de7b", "sighting_of_ref": "indicator--bfedcced-9949-4c69-a808-3b900f2d5d9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f8ce26-1ce7-4c51-8e2c-71dc87c6e3b8", "sighting_of_ref": "indicator--c7a1035c-a0c4-458d-a208-b3591658e407", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6762388f-2e46-439d-b310-26420a1ba498", "sighting_of_ref": "indicator--ea4d77ec-d091-429f-8aa1-7a020c68d5e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32f112e-e3f7-4c61-939a-bdde53388d28", "sighting_of_ref": "indicator--dbc97f55-de43-4cb0-8eeb-9ba6f1fe19c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f368b3f-e8d7-44eb-880c-f2b52162df47", "sighting_of_ref": "indicator--e46ab1c6-aa1e-455f-8fd6-b5e962cecff6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde500c8-67bf-4048-897a-4ee368366aed", "sighting_of_ref": "indicator--6d7a2731-246a-4c48-9fe3-d0b979699643", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5918a4c6-5c1c-473a-b6ec-926e5ec63369", "sighting_of_ref": "indicator--2b851c55-dcdd-446d-a463-4bbbd421aacb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c58950-558a-4318-9948-aed590aefd8b", "sighting_of_ref": "indicator--657a2ee6-2c03-4779-96b1-1f82fb079f99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8cd5e3-d7a0-4878-9435-8d3bb796add2", "sighting_of_ref": "indicator--c7a771e6-5fcb-42ec-b317-4c42697109e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d6de9f-c453-441b-8919-55fe9929dd17", "sighting_of_ref": "indicator--69dd0e43-6152-438e-affd-00608ad6ef50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8bceb3-1999-4d51-910a-23e332250fda", "sighting_of_ref": "indicator--20b925c8-c401-48a3-ad2a-ff5284605a2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9123703-82a4-4631-97b7-7d0f2b36ea35", "sighting_of_ref": "indicator--aa375053-4975-4bff-9093-0a9461716e02", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294d23b5-f338-40c5-bc32-22ce736d02d1", "sighting_of_ref": "indicator--12c426db-e562-471f-b355-d21f028953f9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a7b181-d775-407f-b7f3-4c3bcd84ecd3", "sighting_of_ref": "indicator--8fd5ebd0-a09a-4e9b-9da9-533d7753e0f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c4777-2c15-4a09-9234-19f3ad2e26ce", "sighting_of_ref": "indicator--8fa44523-8eeb-43cc-8910-c70957d76330", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686b8df6-35e4-4d93-9f2e-88075def32da", "sighting_of_ref": "indicator--eac3a9e3-5c19-43c9-a55b-3f955de3e865", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc95ab62-4a7d-4e37-a3ed-7f09e76f5635", "sighting_of_ref": "indicator--8433b56d-3ac3-4c8d-ad64-851be781914d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ffeb12-5513-478c-9d98-fe7c3e30d627", "sighting_of_ref": "indicator--7d8c27fd-1442-4f3e-9b80-a291be20f592", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ec23dd-ffd3-410c-bdfe-b0ae50b4eb89", "sighting_of_ref": "indicator--d660bb26-c588-475f-9ca9-02a8e2b0a463", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fa585c-6bf9-42f5-b188-06d922473187", "sighting_of_ref": "indicator--b04b6a05-f35b-4e72-965d-b09a7f2d6861", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6651bf-428f-4724-92f5-2454485770ad", "sighting_of_ref": "indicator--bf21cd8e-0471-4d7a-a0b2-016a3dddffa0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161385ef-b75f-4108-8555-556984abde93", "sighting_of_ref": "indicator--0350fb01-1d69-4255-b4a8-4a57648246f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042af2b1-b6d9-4699-826b-ef79e072dbc6", "sighting_of_ref": "indicator--5461c340-e820-4a71-afa8-231064eb51f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683e2307-cd4b-4a88-ab85-2bf9e4adfbd4", "sighting_of_ref": "indicator--22b4c30e-f0f1-4267-b4da-d9f2bc15518d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7392e782-697e-49bb-ad97-437bdcba5fb0", "sighting_of_ref": "indicator--c81cfb85-5e2b-4d04-966f-f89d3cb9f182", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa76cc3-1b8f-4bb3-9f47-10488db45e72", "sighting_of_ref": "indicator--45ab18b1-21f1-4d93-bd9f-4d6cebc03389", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900f7c5b-fd57-40d9-bf06-1d7895667563", "sighting_of_ref": "indicator--2e8301c5-31b7-4a70-8fa5-f9a22b033f3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efab849a-8b12-44d4-b137-00de66e243e4", "sighting_of_ref": "indicator--21f0b8d7-a52c-4638-b23e-facb14860b94", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d1d5ae-f0dc-4b6b-98c0-af4f6b804baa", "sighting_of_ref": "indicator--21f0b8d7-a52c-4638-b23e-facb14860b94", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b6a0cf-6e61-47f5-8655-40dd6d0ac5f6", "sighting_of_ref": "indicator--f0f350d7-16cb-48ae-b09d-55a5a356737f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be93b822-fec8-4868-89b8-694cc919b4d0", "sighting_of_ref": "indicator--eb3468d3-2c25-44bf-b422-bf418e02bd11", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e11960e-44ea-400f-8355-1aa531d10fb6", "sighting_of_ref": "indicator--acf98a83-fe75-49c4-b82f-1a327251311b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d535ec1-1c1d-48df-8954-ad18a5281d19", "sighting_of_ref": "indicator--4e40d844-008a-47a9-8802-ec25b4a6d3b0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a12ed8-651b-46cd-8060-43e4762e9315", "sighting_of_ref": "indicator--d601baa2-4579-4bd6-807a-fc15f86f75be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e114182e-7495-493a-b719-8b0718743410", "sighting_of_ref": "indicator--f4775bd3-4a14-43d9-b02d-c20f5143e1e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f92d510-c5e4-4535-bc41-e8048dd1e575", "sighting_of_ref": "indicator--a44a0d1e-9161-4ab5-8764-de991591d233", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e77381f-fc03-42e5-8750-72905a54b4a0", "sighting_of_ref": "indicator--0709cb97-1b47-4677-8f06-a5f94f59291b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdb09fb-88f0-474d-aabc-133e1e926785", "sighting_of_ref": "indicator--921e32cd-8bbb-4567-bb61-2783ffa35bb3", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12ef84c-1fb5-4a41-8973-2722280742d4", "sighting_of_ref": "indicator--8ed3f9f8-8a31-4353-9a1e-c5b78f0ca8a5", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e372b4-fc57-44fd-8ee3-acbb16b89a77", "sighting_of_ref": "indicator--8ed3f9f8-8a31-4353-9a1e-c5b78f0ca8a5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a40c93-aaf8-455b-a8c3-6f4e41a57381", "sighting_of_ref": "indicator--17c39d34-562d-4ac2-a0a8-2f55191a5bd4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01baace7-ff09-42a6-9e33-05a61a1936fa", "sighting_of_ref": "indicator--294380e1-2b03-465c-be7e-5d96f4d66dd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e801e9bb-dfdb-484a-b5eb-fafa41b94d39", "sighting_of_ref": "indicator--de1bd799-2faa-40ef-beb4-8df673193c00", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d55f77f-5741-4fd3-b6ed-d671ba5b583b", "sighting_of_ref": "indicator--3e253c28-661e-49ce-a557-d97a45969fd1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65469773-b508-471d-b65f-7ba50d12849a", "sighting_of_ref": "indicator--e7706f32-5361-43ac-bd58-e76b2323578e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62041233-3111-4fad-a197-a5b738a4491a", "sighting_of_ref": "indicator--07bce49e-7453-4c00-80ad-0333ea91fe7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6103d63-1647-49af-a633-f62186605cc4", "sighting_of_ref": "indicator--7f358687-1ad0-4ee6-a798-5f390ea8f0b5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d108e0eb-e3d9-4533-af1d-0d44ca7e0768", "sighting_of_ref": "indicator--383da9be-2deb-481c-98a1-5a4edca02942", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22678b30-140b-48e1-99b1-912f22d24074", "sighting_of_ref": "indicator--f72c4f28-4abf-41fb-bf71-7f013fad1839", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbb40bc-272f-474b-af4d-fded865364f7", "sighting_of_ref": "indicator--d7c55bfc-a554-431b-9dbe-c4e1f0e813d3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab5cb6b-fe79-4221-b2b3-0890eb5a52b2", "sighting_of_ref": "indicator--c21a45bb-c1ef-4811-abc4-da754cc44b0c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6dedd5-9426-4461-bc66-479053e8964f", "sighting_of_ref": "indicator--1728582e-8630-48d7-b2a5-5555e1a33e0a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4327c2-59ac-4779-80dd-1e5d9a35f93e", "sighting_of_ref": "indicator--a133afc4-025c-47c4-b4bb-6fce8f9c0398", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d35120-916d-42e5-a008-f593cf3d1ca6", "sighting_of_ref": "indicator--d26172b5-fb61-4b16-bbb8-bb83045c8c06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54105d8d-4bbc-4fe2-8f9d-b04f344bb63e", "sighting_of_ref": "indicator--595fa802-1077-428c-a010-3fb87ffa6c99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcd52aa-cde5-4df8-ac66-9bc3e6a53536", "sighting_of_ref": "indicator--d82569f5-f0b2-4270-a290-107eab995330", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e46a27-6b70-4542-b04f-b697d00bc014", "sighting_of_ref": "indicator--28085994-6c9a-4dad-bd1f-f3cef2f2b298", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3177272-aeed-4caf-b91e-62c5426b1911", "sighting_of_ref": "indicator--85fac571-cd5f-4b5c-b0de-8a8a9cbd15ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148ae891-cb25-4231-94e0-ae9356c1946c", "sighting_of_ref": "indicator--ce4747bd-9f33-4130-aeb4-3b44f7fe152b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2432b5db-17fe-4b3c-aa68-139047398793", "sighting_of_ref": "indicator--49d10ccb-822a-400b-a383-51b306759bc7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a5f741-ddb6-458a-b44a-446a5e36e40f", "sighting_of_ref": "indicator--3764cb62-0167-4191-9d6f-ceff585f50f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecfc5b1-73d1-4c6f-8d3a-11545fe46225", "sighting_of_ref": "indicator--73590669-9bbd-4ca8-ac48-7a630d055ca0", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb0b40-ad3f-4ee3-92a8-7cf48ad54aeb", "sighting_of_ref": "indicator--7db134f2-915f-41db-881c-f85c49f20f9d", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c5030f-d823-49b8-aa77-9d3ba584ea66", "sighting_of_ref": "indicator--83646301-89d4-4576-8203-d2549efab8cf", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1cbab2-b5e4-4744-bb39-de446c977c1a", "sighting_of_ref": "indicator--ba5e9069-7701-44d3-8d6f-65d20881190a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c241db-4a8f-4720-8fbf-ad4c48068741", "sighting_of_ref": "indicator--ed0c0578-4adc-4aed-8973-9d06a5b90651", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b88d99a-a222-4399-9259-afc6187f2087", "sighting_of_ref": "indicator--a489bfa2-fbfc-420b-91ad-ac98f334f0b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11949bed-1284-4f04-bb6f-4b533a363f30", "sighting_of_ref": "indicator--d06c58ec-c785-4972-9baf-be9f269dd907", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be0db7a-56ad-42a3-90f6-eb624121bf5f", "sighting_of_ref": "indicator--4dd39d88-48bf-4a1b-8caf-bf137525d4a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f364609-e1e6-494e-9384-94dbe1f1d97b", "sighting_of_ref": "indicator--49c648b9-42fe-4638-8c5a-e80aa69aa23e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb53bc-2c5d-432d-a722-ae646eb1c2a8", "sighting_of_ref": "indicator--1b8f79e1-c8ec-4a12-8943-ae5f49bf40fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fe4d23-0ef0-419a-8a1f-d6d8fd11b848", "sighting_of_ref": "indicator--60eb3f7e-32b5-410c-9521-b10daed16246", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805cc7e0-0e43-4a7a-9d5d-f6be2fa94b3c", "sighting_of_ref": "indicator--0e91896f-6a89-42ac-8166-f1ca2afb0c10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835bf1d7-b1ae-474b-bbbf-7a7dc49f25d2", "sighting_of_ref": "indicator--70c6b159-ced0-44d4-846e-e0836b7021a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15ce013-0a0a-453c-9096-f92c1258319a", "sighting_of_ref": "indicator--fb823751-c13b-46b6-b7c5-771684f68544", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861ab5e2-1b3b-447e-b553-03e7e9b1211e", "sighting_of_ref": "indicator--fb823751-c13b-46b6-b7c5-771684f68544", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e89b9f5-eaa1-4f75-ac47-645fb50c1dd2", "sighting_of_ref": "indicator--1bfc62a7-9322-44e2-9631-fb1816d1476e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06861054-d1b9-451b-8b0e-4f2ababd5937", "sighting_of_ref": "indicator--df7104ad-6185-42b4-922a-43f31b78f50c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b862e55f-ae66-4bfb-ac1c-f777e9a4dd6a", "sighting_of_ref": "indicator--308d3fed-4e14-4f06-836f-99cad376ec05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b7bd37-d6d6-4f0f-8530-cd6f6f4a674b", "sighting_of_ref": "indicator--99be1c51-9656-4360-bbb3-38eeaf438b05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a991c7-2bba-4b4c-8046-5a358b94c7d4", "sighting_of_ref": "indicator--1db59c5a-3110-4aec-ab85-936fc1b62086", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fa96bc-8d73-4c6f-871b-892fc11282c9", "sighting_of_ref": "indicator--00cb7615-54f7-4ae2-9f60-0776b6cb2d07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a39d5a-58e5-4829-8b1a-9a93b70a7473", "sighting_of_ref": "indicator--c3954b5b-f48a-49b2-b0f7-902405575c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3aa07c3-cfc1-402f-9023-5d8fd4aa0dc9", "sighting_of_ref": "indicator--e2db8665-b652-46dd-9f79-21ee8baf7225", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32552cf2-300c-4a62-b3fe-b9858c9877dd", "sighting_of_ref": "indicator--88d7213a-9c84-46a9-9ec4-98bf178e17ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ef1f1b-6fe1-428c-8afb-e4b29fc66a58", "sighting_of_ref": "indicator--190e0fef-add4-473e-9b95-8dfb9d373c08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf896f90-ba77-4cb2-bd87-018c2b857310", "sighting_of_ref": "indicator--f4d725a5-cf31-4d34-99c9-6d2692249df0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee09950-5d5e-4ac0-8cac-f9aa04aca7d0", "sighting_of_ref": "indicator--ed1d72fa-017d-4b61-a2ae-ef49c891ece7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e316c14-a6bc-4c28-a31f-3d83ef137d29", "sighting_of_ref": "indicator--d0c37649-db09-47bb-a984-23ccafef9212", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c796b059-41b2-41c7-b40d-9517a92ccf06", "sighting_of_ref": "indicator--fc166f61-d254-4d07-baae-876d72d85bc5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ece8dd-ff6a-48f5-8be6-ed2e0ef31d9f", "sighting_of_ref": "indicator--304161fe-808e-4e4b-a075-5929126fa1f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b55bf8-42a7-4a10-92cf-c423b2da6261", "sighting_of_ref": "indicator--d8419335-9486-45c7-bb0e-1317cad3a28a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb6b3fd-c40f-4de2-b316-f82575b6876f", "sighting_of_ref": "indicator--d49453cb-cb1d-4664-894c-e3a52b7d0eeb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc722b7c-b0c0-4eb6-bcc5-8fda0fe87dbc", "sighting_of_ref": "indicator--df58f9a0-d51e-46ae-a5f5-1664157e7b49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485098c2-8867-420e-ad6c-3bfb93b68302", "sighting_of_ref": "indicator--aca02c61-408b-4399-abe5-580b67c96469", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed012992-236d-451e-96b0-1b8ad151f32a", "sighting_of_ref": "indicator--a1bac40f-3277-4686-bb3a-744a6eabcdcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9781fe-310e-441d-a53d-51325e1016de", "sighting_of_ref": "indicator--20332474-027f-4475-afda-62714d0f22a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd2ef78-8fd0-4f4b-bbbf-fa024fef1b89", "sighting_of_ref": "indicator--79153608-f012-48c3-a29c-3f08eb1a5c2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4503ac-2ef2-4751-8e98-d7e209f5a1c5", "sighting_of_ref": "indicator--d3d7681b-e233-42b6-80ea-901b71de5ea9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a036ae13-aaa7-4643-ac80-98270d5b6e1d", "sighting_of_ref": "indicator--16263fb8-4364-43d9-a37d-8c0d4decccec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c17c2f6-ba0c-4bf7-b4b3-c2113645666f", "sighting_of_ref": "indicator--e41972e9-fc40-41e3-8523-8e2e3361f63b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89dda21-f4ad-4024-9b00-e71903d8bf56", "sighting_of_ref": "indicator--dd1efe68-6178-4004-981b-24a16ededae8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5d3b67-4337-41ec-b69e-f6b39b3e6f4e", "sighting_of_ref": "indicator--38e8d4e7-b795-4794-8340-584440bbb2de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286abf9e-c77a-479d-bf98-ce45846f892a", "sighting_of_ref": "indicator--a49930c6-6ea8-486c-8f77-0f9e933f14f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2e5bea-12fe-473e-9e1c-1103002b3424", "sighting_of_ref": "indicator--74ac97ac-4517-4c88-8d0d-5b0fb59486d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e096f56a-73b5-4514-a18a-91fd94f7b6f4", "sighting_of_ref": "indicator--e2357d31-74cc-4a5c-b32c-878f8f40caa9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf7a1a7-463f-4059-8574-57c0c770a929", "sighting_of_ref": "indicator--e7310b9b-772d-4e6a-937d-8fbb4bd48a4e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9828413-937c-4471-9e9f-787292961f71", "sighting_of_ref": "indicator--8442dc29-ec8c-48bb-a46a-cbd410e91e89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff864f4f-eaae-4c76-aea7-9d6883bcba53", "sighting_of_ref": "indicator--85a5125c-983b-4973-ab6b-4c47d6346b4a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bfac5b-6eb2-45e2-9168-5e79eed93cc1", "sighting_of_ref": "indicator--6e536c4f-ae0a-4ae4-a592-0fd1d5b6d01a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d745a539-e8f1-4f64-a5ce-0893afb29299", "sighting_of_ref": "indicator--c67901ae-d6a2-4722-92d7-cec6b11ae9b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efe190c-fa00-49d8-a6a4-f55fede9eb13", "sighting_of_ref": "indicator--d15d05f7-ca04-4b0b-9b5e-195e4cfe6d66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d767769-9ac3-44e9-90c8-e98441ee18cb", "sighting_of_ref": "indicator--9d847bff-849b-4ed8-bbd9-fa9131715c10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ceea6-9dc1-4273-bf50-437a4d95c898", "sighting_of_ref": "indicator--15553418-549f-4f56-9456-2555dcab3791", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7acf1af-c0f1-4911-b436-86da5331e297", "sighting_of_ref": "indicator--2e3b0e24-23a1-4e3d-9f02-2b0d57bbbcc1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28129ed-b487-420d-889b-2005b91bcb28", "sighting_of_ref": "indicator--088725a0-4e70-4e5c-b5ed-ddc7e70a6097", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb602d6-bb30-484d-b94d-358ff5ab4537", "sighting_of_ref": "indicator--0d41d21e-a943-4f8f-babb-bc2b4d6731db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ddd173-b0a4-4810-88be-75825c3302e7", "sighting_of_ref": "indicator--99db75fa-966f-4c13-9a03-0ab3346c9f5b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174cef7c-e102-459e-9c30-d136bb10d6db", "sighting_of_ref": "indicator--f92be4e4-730a-4aa0-a66e-7b1cd978dd64", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bb8a37-816d-470a-89bc-abc024666c41", "sighting_of_ref": "indicator--1636d0c6-4476-48b3-9cf6-ed39bc27c176", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b15419-b743-4b44-b1bc-79eef8ff21db", "sighting_of_ref": "indicator--ebe2e460-e0cb-491d-bad1-304854951f73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecd6dac-5bf6-4b33-9be6-fe638ccbfe71", "sighting_of_ref": "indicator--f04be0e2-0e76-4992-90b1-dbf5294811e7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61565ce4-3dc8-4731-90ec-d68372296fad", "sighting_of_ref": "indicator--2218527f-77d2-4a4d-9c39-b1713fb93c00", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd6c73f-b3a8-4e08-a6fb-c01cefb4f3bb", "sighting_of_ref": "indicator--6172ad3e-e636-4780-a77c-6ad3271ea560", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b3bb0d-78cd-4403-945f-69081ac2cdee", "sighting_of_ref": "indicator--d689c017-35e8-4163-ab34-615078e61149", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1080c97a-f25b-43ad-9353-cc0f5bafde54", "sighting_of_ref": "indicator--bdd13c30-5639-4737-8b91-547185eea7de", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc516617-73ef-4775-8e93-1441a4c4bea8", "sighting_of_ref": "indicator--a642cb4b-8d80-46a9-90fc-2232ce5eaa94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea45b801-8061-4b9f-8bc7-75f5287fabcf", "sighting_of_ref": "indicator--c7f12eb7-43b5-46be-9e28-c8b45ade7737", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43336fab-a3c0-406e-9900-531b6667e649", "sighting_of_ref": "indicator--496ee2af-7b5a-46d1-99f4-0a8f21087b84", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3113c2dc-4bf9-4785-a983-a70f7518a489", "sighting_of_ref": "indicator--540fe1a5-8a0c-4c73-942f-f50dfbbd558f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a211ac2b-9753-4a58-a415-078734fa38b9", "sighting_of_ref": "indicator--607b670f-b84e-49d1-991e-b6398c2341dd", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0ef9d2-b103-4524-a377-2864916aa00c", "sighting_of_ref": "indicator--607b670f-b84e-49d1-991e-b6398c2341dd", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd147682-4c9c-43bb-8472-419c127bd29c", "sighting_of_ref": "indicator--a75919ff-6fb7-4392-aba0-36befb531d2b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c9eba8-965b-4d02-8922-fca920e15d08", "sighting_of_ref": "indicator--a75919ff-6fb7-4392-aba0-36befb531d2b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd35fc4e-3353-4697-bb3a-81fd96b54e8e", "sighting_of_ref": "indicator--283d5198-7dd2-4d92-b634-7ad3975aec94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de3f8a2-4c6f-4a27-ab3b-37d78bc995f6", "sighting_of_ref": "indicator--ca723f9d-84fd-449a-bf2e-bec9b94479bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a6043d-31e5-43d3-9cbc-9d24b4953774", "sighting_of_ref": "indicator--6ca7edf6-da01-4414-8312-b6f15e3b03ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8278d457-c09b-4535-9ca1-727062dcbf9c", "sighting_of_ref": "indicator--c1d547c8-1d99-4084-824d-5c9d13ad7375", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d65ba4-87e1-4c3c-be8b-42257f0040ff", "sighting_of_ref": "indicator--f0491730-b05a-4bf6-85eb-cb7e94449958", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c33ae2a-9901-4a75-a8b9-7c1f7ff392dc", "sighting_of_ref": "indicator--f0491730-b05a-4bf6-85eb-cb7e94449958", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf45b5ed-5709-446a-a625-ced9365b3ec6", "sighting_of_ref": "indicator--3feb073f-e88d-4d78-b274-d49158eef50e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce306de-e76b-4cfd-bc0d-5df747bffa1e", "sighting_of_ref": "indicator--3feb073f-e88d-4d78-b274-d49158eef50e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5da48b-beb0-4e7f-8f59-4652a8ce96d0", "sighting_of_ref": "indicator--4f97a871-be6c-4516-8a35-1b7bcd8c01e2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c4d147-a01a-4414-8050-d12b0b756acd", "sighting_of_ref": "indicator--4f97a871-be6c-4516-8a35-1b7bcd8c01e2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c232ffc8-02de-450e-9178-6e6edf8d44f0", "sighting_of_ref": "indicator--ab9dd47a-59df-484d-9797-926a196b1b0d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06b1ec7-b4f7-463b-9fbf-be76d9c2b975", "sighting_of_ref": "indicator--ab9dd47a-59df-484d-9797-926a196b1b0d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44bcdaa-fa92-40fd-bcde-1c59e7bc6539", "sighting_of_ref": "indicator--aba02350-9331-41ce-9f60-50e5d26f5b4e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3941e5-12bb-4100-84c0-58017100fa9d", "sighting_of_ref": "indicator--aba02350-9331-41ce-9f60-50e5d26f5b4e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf8ddf8-0224-488d-a58f-8f9ef10cd483", "sighting_of_ref": "indicator--0069fa88-b577-4a27-9731-50dec429a06d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a4f6c-3af6-419b-896a-3c8a7af7ffad", "sighting_of_ref": "indicator--0069fa88-b577-4a27-9731-50dec429a06d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b000465a-fe68-4b0d-885a-53340dd3ac38", "sighting_of_ref": "indicator--1214ce8a-cda8-414f-b6d7-ee84e83d0750", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7270028f-374a-46f7-80e7-4c6c61b169c7", "sighting_of_ref": "indicator--1214ce8a-cda8-414f-b6d7-ee84e83d0750", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f312f9-6249-485b-a8d2-24f27727e5e5", "sighting_of_ref": "indicator--400021b1-d19a-4033-981c-f13112bbcd92", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d329af99-be6d-4978-8c56-2fdc682bcf72", "sighting_of_ref": "indicator--400021b1-d19a-4033-981c-f13112bbcd92", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fce682-169b-46fa-9dc6-e7fd829bc3fe", "sighting_of_ref": "indicator--979c394d-4931-4c09-adc0-ec143be45d0b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c8fe75-9360-4354-98a7-59aefa6a9ae7", "sighting_of_ref": "indicator--979c394d-4931-4c09-adc0-ec143be45d0b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f284fc9f-e3c1-4b96-bf1f-93834ec12715", "sighting_of_ref": "indicator--ca689f55-f175-418c-84ec-2f844fe9c1d4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8478de5-2bef-4ae4-8a4f-4ed321ff41fb", "sighting_of_ref": "indicator--ca689f55-f175-418c-84ec-2f844fe9c1d4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be47f26-5d34-4e1d-8b92-9fb861be0b24", "sighting_of_ref": "indicator--0facdc3c-575f-4473-bd7f-09e3ff75e535", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0649476c-f588-4b37-99c4-89e6ffb978ff", "sighting_of_ref": "indicator--0facdc3c-575f-4473-bd7f-09e3ff75e535", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab0de37-67ad-47cc-aa3c-56c3fc5c3b6f", "sighting_of_ref": "indicator--c0346424-63fd-4013-a81b-e72c266621d1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a731b2e-1420-4a6c-a907-d3400212c07d", "sighting_of_ref": "indicator--c0346424-63fd-4013-a81b-e72c266621d1", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8561fa9-6ed6-4cb8-8d68-cd23bf3cc158", "sighting_of_ref": "indicator--6c2ba3aa-6a78-44fd-ab1d-fc1bc66efd7a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ae2ad5-8f8b-4f19-9fc9-64e178f915dd", "sighting_of_ref": "indicator--6c2ba3aa-6a78-44fd-ab1d-fc1bc66efd7a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615efe4f-fcec-4eaf-bdc4-a413f6eb2aec", "sighting_of_ref": "indicator--83b9dd1f-42b7-4ea2-879a-5931db172563", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293cb40d-ce21-4599-9e10-d6f7943ea777", "sighting_of_ref": "indicator--83b9dd1f-42b7-4ea2-879a-5931db172563", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac9240f-fbbd-4dbf-adf6-7a2b4030b950", "sighting_of_ref": "indicator--40f0865a-0e84-4396-b39b-3d84842f4df1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdbe37c-eaef-42df-9566-fdb696a769ba", "sighting_of_ref": "indicator--40f0865a-0e84-4396-b39b-3d84842f4df1", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3449ed-9336-4f30-a20b-adb817b731d9", "sighting_of_ref": "indicator--01209c54-f3ad-433a-917a-64734e4be711", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3236b2d-45e7-494b-b69f-47c2f5b53e4f", "sighting_of_ref": "indicator--01209c54-f3ad-433a-917a-64734e4be711", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e765c2-5969-4db5-8ec8-bfbb2610ef0e", "sighting_of_ref": "indicator--82cb4f09-cf97-4cb1-8a40-dbd37ca9f033", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1626ec95-060f-4196-916a-ffd0aac99fc2", "sighting_of_ref": "indicator--82cb4f09-cf97-4cb1-8a40-dbd37ca9f033", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fdc575-9edc-4a9c-9180-37784865a0fd", "sighting_of_ref": "indicator--32c7986e-a47a-47f1-a0ff-b0e0db5fff4d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6563bf34-f264-4d95-af5a-ac0627327272", "sighting_of_ref": "indicator--32c7986e-a47a-47f1-a0ff-b0e0db5fff4d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf96f29-117e-42de-bef8-fdb945ccfa6b", "sighting_of_ref": "indicator--aeed9701-5f45-4519-a6b6-75e7d375b9a2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486c5e15-ace8-4cee-ab37-018764908d36", "sighting_of_ref": "indicator--aeed9701-5f45-4519-a6b6-75e7d375b9a2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe17ea5-51f4-4eb2-b274-884fc3374e5f", "sighting_of_ref": "indicator--7bcedae7-3ca3-46de-aa7b-96dcf52a09a6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd38172-b2d9-4e33-9061-34876a3b8cf1", "sighting_of_ref": "indicator--7bcedae7-3ca3-46de-aa7b-96dcf52a09a6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093b3b6d-7d39-47d1-a3cb-d09370bb9716", "sighting_of_ref": "indicator--366f263c-52d9-4c28-a572-ee26b70e3b7b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c876be4-8919-49a5-a5ad-b3067dbed7a9", "sighting_of_ref": "indicator--98833216-60dc-4a34-8ae7-ec5b32061a0b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ad1727-1872-438b-aa3c-acc825f2b1ba", "sighting_of_ref": "indicator--98833216-60dc-4a34-8ae7-ec5b32061a0b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33325452-7def-4224-8cea-60053e9bbe2b", "sighting_of_ref": "indicator--b2c2ca8e-32a0-4bca-89b5-c0b03f99f8ff", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dae906e-3a6e-4a06-967f-fd841823903c", "sighting_of_ref": "indicator--b2c2ca8e-32a0-4bca-89b5-c0b03f99f8ff", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b24561-19f5-4002-95e7-22931959420d", "sighting_of_ref": "indicator--53339887-4f76-441e-a596-e3f68e787090", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99f02b-fc21-4bd3-8c89-5f36bab268e7", "sighting_of_ref": "indicator--ece33692-e3f9-4b59-b3a8-9f112adc2851", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a2d473-f1bd-410b-9c3a-bbe56952b59f", "sighting_of_ref": "indicator--a1992fcd-a727-4767-989e-dac8e3c0af61", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5724fa-afe0-41df-a864-499966e81a64", "sighting_of_ref": "indicator--a1992fcd-a727-4767-989e-dac8e3c0af61", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1015a23-509e-4db2-b2aa-d5c0b67a3b41", "sighting_of_ref": "indicator--3e2af547-46ce-4bfe-93c6-a450b94488cf", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57157660-ddec-4ef6-af67-116e8f8d7fe2", "sighting_of_ref": "indicator--3e2af547-46ce-4bfe-93c6-a450b94488cf", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089c7c12-90ba-47ff-be3d-b1c717ac97aa", "sighting_of_ref": "indicator--16434e05-32aa-4940-af68-b20eaa149e51", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82e9e94-9cd4-4682-a8d2-29aba43909f0", "sighting_of_ref": "indicator--16434e05-32aa-4940-af68-b20eaa149e51", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b890d21a-ae2d-426a-9dbd-808bbdbffba3", "sighting_of_ref": "indicator--99ccf9d3-920f-4db1-855f-afd0c41dea21", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c09778-6230-445a-9d73-7001e06e8a4d", "sighting_of_ref": "indicator--8be8a247-6176-4f54-9468-4c61a47a11bc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fce76d-b55d-4224-a3c4-38f966db04a3", "sighting_of_ref": "indicator--8be8a247-6176-4f54-9468-4c61a47a11bc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61b1d85-d554-41cb-99c5-ed372d697da0", "sighting_of_ref": "indicator--6ca163e3-dd0b-4a84-968b-3fecce53b70a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713491f7-6907-4ef0-9542-33977cf15399", "sighting_of_ref": "indicator--6ca163e3-dd0b-4a84-968b-3fecce53b70a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01302735-e4a9-40e3-b86c-22851655ea97", "sighting_of_ref": "indicator--62ad81b2-eb97-4734-b337-d3ce2fee22dc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbb47ee-6a03-4ca6-925c-390e347fa05a", "sighting_of_ref": "indicator--62ad81b2-eb97-4734-b337-d3ce2fee22dc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ca2550-0323-4093-a0ba-15278383bee6", "sighting_of_ref": "indicator--ced2a9f4-9008-42e5-85b6-9f2829885c90", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46805efd-298d-4729-9681-4d313528a6df", "sighting_of_ref": "indicator--ced2a9f4-9008-42e5-85b6-9f2829885c90", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93213ba5-a3cd-43c8-b7b2-5b8db0874801", "sighting_of_ref": "indicator--47c70db3-0844-41d7-92c9-ef087bc576c7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3d0613-2ec2-4378-a442-f0d755c8fe9f", "sighting_of_ref": "indicator--47c70db3-0844-41d7-92c9-ef087bc576c7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a6ddde-72c5-4b30-bd66-2692251498d0", "sighting_of_ref": "indicator--cfb57b9a-d4dc-4bef-b954-b90c9392c352", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de09410a-ea46-4bce-b13a-7346f241ab65", "sighting_of_ref": "indicator--0d1a1467-ceef-4422-9b1a-b39dda8039fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cc82b3-7b10-41ae-971c-142a21c84ae4", "sighting_of_ref": "indicator--0e0848ff-2d8a-47b7-a681-c258c9b7d7a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5e27e0-3623-44cd-b19d-65fed43581c3", "sighting_of_ref": "indicator--82337a00-9b48-4881-a9eb-e58d47acb19a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d58f29a-f9ec-4aaf-8458-6dab71a01798", "sighting_of_ref": "indicator--5ffc3555-c5e3-44a1-be0c-b36015dac496", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4652929-9485-400c-89ed-14c41921e495", "sighting_of_ref": "indicator--c5ac6b47-a674-410a-91d0-0685a06b31a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9161fa-7813-4f9b-a1c7-a0d6156b41c7", "sighting_of_ref": "indicator--a8694722-56b9-4496-b3f2-6555a347a02f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e1451e-3d53-454e-b05a-6d02b067789d", "sighting_of_ref": "indicator--e7877e62-22a1-4b10-9ad7-194bac41d68f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde62191-7123-4653-8120-82face0cf667", "sighting_of_ref": "indicator--98e45494-c999-455f-9edb-24dda3f39a40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56eaf95-acc0-43cf-b854-089552c47d74", "sighting_of_ref": "indicator--35b2fb71-1139-41cb-917d-94b658424917", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13968133-ad23-4ea2-a1f3-30b91287bf8a", "sighting_of_ref": "indicator--93c20039-832c-4ff9-858b-f0da545c440a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78057dc-affc-44e1-a58d-8eab25662f55", "sighting_of_ref": "indicator--7ca73ea9-1db6-4335-93c4-81b818a52fcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363cecbc-ca5c-4ec4-a381-2a8bdca16057", "sighting_of_ref": "indicator--48868b14-90f8-4dfa-8646-11f92ba8bdce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee7e2c7-d875-4e31-a434-bbf6a4a7dc67", "sighting_of_ref": "indicator--e8512669-6b8f-405c-9ecc-d2c72bc38e30", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7904331d-4b5c-45bb-962b-82535ba62e5c", "sighting_of_ref": "indicator--487606ce-5ef0-4fc4-960c-03e4a261d5f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c353aac0-42b8-46cb-a177-ce713564ddb3", "sighting_of_ref": "indicator--cb5c26dd-3cba-460c-b038-64c47e373769", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45ecc5f-dae8-4830-9acc-f8bb3324d47a", "sighting_of_ref": "indicator--98f7fda8-5ed3-4f46-8dbc-fb0675ded801", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0f1667-ac62-449d-a0b7-7bb370c3d57e", "sighting_of_ref": "indicator--b676b07e-92b1-43ae-9475-e5f9747ed564", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c8f52c-d412-4071-947d-5cb3c50f33a9", "sighting_of_ref": "indicator--100b1b0c-cc45-4d8c-b1d3-742114113a08", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b491bb66-399f-48d1-9138-e62cf4ee8da8", "sighting_of_ref": "indicator--a897fc26-fae4-4aac-83e7-0f88758f1b99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50a0400-695a-4eb3-b892-d4d7f4c7ad66", "sighting_of_ref": "indicator--25a094b9-3d71-4648-8a70-37ec862782f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeb3bc4-0019-477d-8664-cbf2b069a46d", "sighting_of_ref": "indicator--19592be5-2cc6-4db9-836a-04c79f562d7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8369ba-66c2-4c2c-80d7-79c5fc072c4d", "sighting_of_ref": "indicator--94cba6d4-df85-4f69-8a0a-c238ff3ffc11", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c55db4-e28b-4bc2-b4f2-bd530cfb3035", "sighting_of_ref": "indicator--07414293-881e-4460-b4da-0e0e85b9f1ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6359fc31-76d7-4913-80a9-22f59d39b845", "sighting_of_ref": "indicator--69fecec3-21e7-42a7-8c7a-8113e2bc0e35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b80e92-0911-4c3d-8100-51145ed461eb", "sighting_of_ref": "indicator--ead61772-3f3b-49f6-889c-ce748d99ea61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbe2ac5-2dbf-40f3-9d51-c6c3ed89e998", "sighting_of_ref": "indicator--c44f85d1-731f-4901-ba89-14e7ccc34797", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4787ab-addf-4479-8c80-ec1b026c369c", "sighting_of_ref": "indicator--0770a4c4-216a-48d9-9dc5-0afd0d5c7d74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0347e858-6c40-4dc1-a1fe-bfa3b99d2b6a", "sighting_of_ref": "indicator--ce3c6937-f323-4f41-a95f-3aa33e2556e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d93551-23f4-4db2-b218-ccad02b91984", "sighting_of_ref": "indicator--6b9abdb0-7442-4f5a-b0ca-6704e3a1cce8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906fbc63-14c0-4a36-8faf-583b2d32f878", "sighting_of_ref": "indicator--b41148db-1faf-4812-a7b3-a6b1ef4df55a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c14e6c-b349-43ce-a406-79c060475978", "sighting_of_ref": "indicator--35d752ba-ed9c-4f8b-9e86-9ec5a39e753f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b7953-3f20-456c-af29-68ab340458c7", "sighting_of_ref": "indicator--ea8e44bf-8364-4cc4-8995-cfa8ad3c04e7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1414202f-45d4-4863-a407-284c72d9b77d", "sighting_of_ref": "indicator--e883e851-0763-46f4-9865-90d2101fa41d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6a04d7-65a2-4643-b8b8-b25f070a7f87", "sighting_of_ref": "indicator--d6636aac-81bf-46ea-9db2-f35e24a9f449", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13224ee-0e0c-439d-a8db-a24eaabc674e", "sighting_of_ref": "indicator--51c1fdb5-bd7e-48c7-b4c7-9916177b413c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38af5076-9f0c-42e3-9232-7334fc4ed71e", "sighting_of_ref": "indicator--1b5b96fc-b2f9-430f-a3d1-3340efbd8a14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6626db47-4cba-475d-94fc-90acaf4c3d6f", "sighting_of_ref": "indicator--2b5e9cfe-967b-46ab-b222-56e0638f04bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec33e04-4abb-4c8b-84de-95c0a8277032", "sighting_of_ref": "indicator--5fba3e4d-512c-4dde-aed0-eaae38018c3a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc448de-0c76-421f-8f2d-292f42f2f674", "sighting_of_ref": "indicator--e696a858-54c0-4e91-bf0c-7e2a4c22d2ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2c10ff-79a5-49a8-9081-b4b97bdbd6d5", "sighting_of_ref": "indicator--40731ab0-be4e-465e-936f-a1023a1847d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1388730-633e-4ee0-8294-5097b87930c0", "sighting_of_ref": "indicator--99c53d64-cc2e-4039-b036-63dea9e7e2f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6727e40-3ac5-49ee-9aae-b72b881ceaf3", "sighting_of_ref": "indicator--bda8de6a-a555-4970-af7f-87e3256aa437", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1392e5e9-204a-415e-a359-46576fca947d", "sighting_of_ref": "indicator--c4a760a1-2002-491f-8b6e-455d4be6acd1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b96fe8e-e385-49dd-89d8-0fa79cc9622e", "sighting_of_ref": "indicator--b70e99bf-15be-4430-be98-24f615083e34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39958b19-f400-4aea-b096-90b21532e167", "sighting_of_ref": "indicator--d60d5de6-181d-4309-80a4-7dc18c7a82c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8746eb4a-d69e-44a9-a9b3-77ed3b5a4ace", "sighting_of_ref": "indicator--a1534039-87cc-4b9f-8c9b-3f1b08bcae43", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5100869-dbf1-4e49-80e0-aad5bfc5ca11", "sighting_of_ref": "indicator--814eeb7f-e2ad-4326-a601-54a5a0e858c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a7b13b-133d-4a4e-b7bd-f037f1e736a8", "sighting_of_ref": "indicator--ecb8fa44-6f86-4a36-a7df-695d240cec87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3352acba-bfb1-4f4f-9471-5bbf5974c79d", "sighting_of_ref": "indicator--f11fc197-5644-459c-a7ef-73737abcd2ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a36002-ec85-4a37-9c54-f70c2d40121c", "sighting_of_ref": "indicator--139c40e6-ef31-4b12-a0ca-796ebc99592b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c41391a-0a13-44fa-90bb-1930517c2dc6", "sighting_of_ref": "indicator--b5d97e34-e2d8-4d5d-927a-70aebddb8b29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b534e32f-71c9-4aab-9ea2-84fe5ee1999f", "sighting_of_ref": "indicator--80e7b1f9-9119-4d2c-a9bc-a39d258d0bfe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fbcc4c-e14c-4a27-a58b-57a18daa24ce", "sighting_of_ref": "indicator--da210666-f658-4fbb-991a-e6f39e5b563b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd66bf2-ac90-4898-80be-3b38d158a1c7", "sighting_of_ref": "indicator--ee3e4299-30cc-410a-ae91-9a734fa45bc9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095f5579-ffe1-4c98-81b5-5d18aa14ac97", "sighting_of_ref": "indicator--ee3e4299-30cc-410a-ae91-9a734fa45bc9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231e889a-5cd0-4b77-975c-8936aad8372e", "sighting_of_ref": "indicator--13fed9f2-9bf3-49ff-8c49-a83e9e8de5e9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f15b7a-ace9-416e-92bb-5836d7b6371c", "sighting_of_ref": "indicator--13fed9f2-9bf3-49ff-8c49-a83e9e8de5e9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce368b63-3c5d-4766-abc9-4b1d38e8f17f", "sighting_of_ref": "indicator--1335b7c5-febe-4ae1-a806-3cced31b44c3", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cf02a5-9b58-4f4b-9b5c-f93f229a8e23", "sighting_of_ref": "indicator--1335b7c5-febe-4ae1-a806-3cced31b44c3", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d323a3-5882-4282-a240-554a26393c28", "sighting_of_ref": "indicator--07688e30-db13-4f7b-a0d8-aadd12f8fd50", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2636489d-dc79-476d-b7e2-e9a3ffcf60bd", "sighting_of_ref": "indicator--07688e30-db13-4f7b-a0d8-aadd12f8fd50", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a484acce-b5dc-441c-ae99-1d5880fa2365", "sighting_of_ref": "indicator--374d2a80-1301-4941-8b1c-c77e855b8bf2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84ceacf-77c8-4ea1-8609-3585a6e4989e", "sighting_of_ref": "indicator--374d2a80-1301-4941-8b1c-c77e855b8bf2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb109eb-c793-4c5d-9bf0-37b56275daab", "sighting_of_ref": "indicator--1fe396e2-d218-4751-84b5-9741c200a587", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3cb21-255a-4e08-b268-0749a7ff4c8f", "sighting_of_ref": "indicator--1fe396e2-d218-4751-84b5-9741c200a587", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ed7ac4-f062-4956-b98e-192349fb92d1", "sighting_of_ref": "indicator--a0b91705-109a-4a41-9d51-7f63f599fca6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d57478-dd34-4540-a874-981bc2af0fae", "sighting_of_ref": "indicator--a0b91705-109a-4a41-9d51-7f63f599fca6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d42d75-ebcb-47e6-8997-01dcf7a4cf6b", "sighting_of_ref": "indicator--7775b818-f776-4520-a7bf-3d8d62a1c87f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba0d72-3d24-41ff-bf86-baf9d56fffb7", "sighting_of_ref": "indicator--7775b818-f776-4520-a7bf-3d8d62a1c87f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182a8937-2baf-4410-801b-2656638d7b35", "sighting_of_ref": "indicator--6c8fe244-c9ab-4891-90cf-e76cde90eede", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9a0b23-af6e-440f-ba37-557275e7a30f", "sighting_of_ref": "indicator--6c8fe244-c9ab-4891-90cf-e76cde90eede", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259758e9-e181-4932-9d6f-71e2df11dcb0", "sighting_of_ref": "indicator--079f449e-8f8f-46aa-8d2f-b5690d048e42", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d112e8-93ff-403c-b8cb-8ee9c2e43486", "sighting_of_ref": "indicator--079f449e-8f8f-46aa-8d2f-b5690d048e42", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf81bff-fb66-4d9c-8e33-8636ffb8cc96", "sighting_of_ref": "indicator--67aef5f0-d641-4880-8ba4-f5b097e85c4d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ba26f1-ce47-44fb-ba33-75aa670bbe08", "sighting_of_ref": "indicator--67aef5f0-d641-4880-8ba4-f5b097e85c4d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d9dc7b-d31a-42dd-ab70-5c7e02833e82", "sighting_of_ref": "indicator--d0e20cfb-aca9-4ac3-9700-e0794ac0c5d1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991b7d2d-2233-4358-bcc5-8ec1fe5056ba", "sighting_of_ref": "indicator--d0e20cfb-aca9-4ac3-9700-e0794ac0c5d1", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d586fd-093c-48c6-a3e3-f61994836ea0", "sighting_of_ref": "indicator--10d64395-0292-4213-8c2f-174b729c6b20", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e64d93-14de-415f-b63c-efb59762c2fa", "sighting_of_ref": "indicator--10d64395-0292-4213-8c2f-174b729c6b20", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0e0126-b6d6-41ca-9a89-9a3204787e5e", "sighting_of_ref": "indicator--2f63370e-86f1-4584-9d42-2a99e2b2ba40", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e71d300-f314-4248-bb4b-5275082aee8e", "sighting_of_ref": "indicator--2f63370e-86f1-4584-9d42-2a99e2b2ba40", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dbbc0d-574b-44df-931d-1e16a0768dfb", "sighting_of_ref": "indicator--23723f6b-b44c-4db6-8e2d-b7d04075b9fe", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d363865c-fdc3-41df-acc5-db86846fa08d", "sighting_of_ref": "indicator--23723f6b-b44c-4db6-8e2d-b7d04075b9fe", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec0ba1d-dcb0-47ad-ab80-aab6710f98e9", "sighting_of_ref": "indicator--c89699ed-cacb-4ac5-8356-9516eb1185ef", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc226d6-d552-46e4-9441-949109a7e405", "sighting_of_ref": "indicator--c89699ed-cacb-4ac5-8356-9516eb1185ef", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61653c1f-13b6-4757-93b3-f68de4f47a9f", "sighting_of_ref": "indicator--9400e40e-6e7f-4def-809b-da23279d6970", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409d0a88-4e98-4964-a504-dc5546589176", "sighting_of_ref": "indicator--9400e40e-6e7f-4def-809b-da23279d6970", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a34f724-c532-4aa4-85ea-2c217925932a", "sighting_of_ref": "indicator--70b06a02-8596-41d7-ad43-f14ec3a96e05", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ac6972-8136-4ae0-9381-99261198ddac", "sighting_of_ref": "indicator--70b06a02-8596-41d7-ad43-f14ec3a96e05", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0358e907-0e1b-4a16-b3bb-a78fddccde4b", "sighting_of_ref": "indicator--4c285f07-9c79-4867-b325-76e549ff68f4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b781f1-bb46-4cb3-b3de-7ca343b0e141", "sighting_of_ref": "indicator--4c285f07-9c79-4867-b325-76e549ff68f4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1166ee12-7fdf-4ecb-bbc3-4da5a1b9d512", "sighting_of_ref": "indicator--f80637ad-9905-48f9-83bd-90ab4ab41ce6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79242b9f-e083-407f-bc1c-1ac6eaf371d3", "sighting_of_ref": "indicator--f80637ad-9905-48f9-83bd-90ab4ab41ce6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f11cfb9-b52e-467a-a79d-8fbee752ea6a", "sighting_of_ref": "indicator--94906cb1-af0c-472b-9feb-6b24cbb34a86", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452e4b30-9a9c-45a7-953d-dd77d89916d0", "sighting_of_ref": "indicator--94906cb1-af0c-472b-9feb-6b24cbb34a86", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba412ad8-e1ff-4f5f-903c-942d743bfba3", "sighting_of_ref": "indicator--dae9ab3c-6541-47e4-822e-aa0ed7732306", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65ff973-19c6-411d-9a79-b906e31f388e", "sighting_of_ref": "indicator--dae9ab3c-6541-47e4-822e-aa0ed7732306", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b286c5a-17bf-4c20-a3f7-44b90010f92a", "sighting_of_ref": "indicator--e9ca3041-f07c-459c-86f4-f516d5178cac", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecc990e-6b01-4447-9aca-a03a8cb7facb", "sighting_of_ref": "indicator--e9ca3041-f07c-459c-86f4-f516d5178cac", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795c3aee-b228-4b62-8f85-acfc75c54165", "sighting_of_ref": "indicator--f8607bc1-69d0-4cf5-93a7-4ab0e5e603e1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d683e6-778d-4203-9c95-8be27384352f", "sighting_of_ref": "indicator--f8607bc1-69d0-4cf5-93a7-4ab0e5e603e1", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1082d7-5d4f-489c-bee8-31d12ecef15e", "sighting_of_ref": "indicator--cccf3e8b-1b69-4344-b493-832bf382801a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3c1673-1ee3-40a3-83c9-b7a37dfae45c", "sighting_of_ref": "indicator--cccf3e8b-1b69-4344-b493-832bf382801a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724f1c3d-24e7-4108-8f33-f9b7eb119c8f", "sighting_of_ref": "indicator--ed965916-9c58-4dd1-888a-7ca20323b2bc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9cf93f-58aa-4032-b635-627175b7d0a1", "sighting_of_ref": "indicator--ed965916-9c58-4dd1-888a-7ca20323b2bc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49ed4ae-f04f-465a-80aa-351fa86875bf", "sighting_of_ref": "indicator--934b61e4-6a79-46a3-8c5f-77381ff9dd4d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51d4ab5-5d1a-45eb-9a73-f48b27f42cc9", "sighting_of_ref": "indicator--934b61e4-6a79-46a3-8c5f-77381ff9dd4d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c6ef34-2c02-4066-adf9-80839d1e38bd", "sighting_of_ref": "indicator--438c1280-bc0a-4a14-8ce8-8b9238deda60", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ccc61e-59b2-4e08-8edc-60f12aba3831", "sighting_of_ref": "indicator--438c1280-bc0a-4a14-8ce8-8b9238deda60", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefab0f2-a2cf-4bd9-b652-d1183c955af3", "sighting_of_ref": "indicator--44f04e02-7dac-4600-ac74-4d2f8347513c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0d0f34-1cb6-4e8b-b051-161353e9511d", "sighting_of_ref": "indicator--44f04e02-7dac-4600-ac74-4d2f8347513c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35b85ca-1cc9-4ceb-ba2b-5dad306e5fd3", "sighting_of_ref": "indicator--61a22f8c-c42b-4523-a14e-2202c9df0e74", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d61fde7-82e6-4a76-a38d-4f24cc336beb", "sighting_of_ref": "indicator--61a22f8c-c42b-4523-a14e-2202c9df0e74", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a8c85b-54b7-4ea2-9785-3dcd7057abc8", "sighting_of_ref": "indicator--dd3fd83a-4d48-48cc-b645-d5a47e40ce8a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94097a7e-6714-49ed-89ac-fce1c2692894", "sighting_of_ref": "indicator--dd3fd83a-4d48-48cc-b645-d5a47e40ce8a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925e27bb-2f9b-454c-a27e-d1f7bb9b1ea3", "sighting_of_ref": "indicator--eac00c27-d5f5-4ed4-bd4f-792dfd47c54c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2942cd78-d03c-4708-ac92-c382712c2674", "sighting_of_ref": "indicator--eac00c27-d5f5-4ed4-bd4f-792dfd47c54c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8c29d7-8dfd-468b-b13c-cda3719496a0", "sighting_of_ref": "indicator--f8743ce8-6ba6-4295-8a61-374b97c62d2a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6d6161-7b35-4eb0-b071-684b99f636d2", "sighting_of_ref": "indicator--f8743ce8-6ba6-4295-8a61-374b97c62d2a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3ae285-cdb3-4ce1-9fc0-27d792eebaaf", "sighting_of_ref": "indicator--6528f839-1b55-4252-a8a7-c1439ca0f2e3", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea9570e-6fe1-45c6-91cc-a073e7aa5253", "sighting_of_ref": "indicator--6528f839-1b55-4252-a8a7-c1439ca0f2e3", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195cf37b-180e-45d1-ba59-480c49ec554b", "sighting_of_ref": "indicator--182fac35-fbb9-403d-acc3-0c279ce0ca33", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c843b030-b0bc-4213-8838-c38ec48fd771", "sighting_of_ref": "indicator--182fac35-fbb9-403d-acc3-0c279ce0ca33", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fc664e-6fcd-4fd7-ab16-59143831991b", "sighting_of_ref": "indicator--7886a78a-0083-4cef-8e7c-a84039177ac5", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dda8ea0-8039-47a4-93ee-fe6ab46f41cf", "sighting_of_ref": "indicator--7886a78a-0083-4cef-8e7c-a84039177ac5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9317c1-0ad0-4aa1-99ee-cf5abcf5c2e7", "sighting_of_ref": "indicator--0fa688ea-f1f0-4f1a-9d8f-4728bea0d2ab", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc43099a-63b8-48e9-8dfe-2e0076c14907", "sighting_of_ref": "indicator--977db999-d0c3-4f3f-951f-65377a7b7348", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71a3973-78f0-4adc-8b91-07dc93071ff9", "sighting_of_ref": "indicator--f096d5da-fab0-4f86-bb3b-9137a0250b23", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d1c9a8-f3e8-4ed7-b533-cf90e38306a0", "sighting_of_ref": "indicator--f096d5da-fab0-4f86-bb3b-9137a0250b23", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c28932-2f3d-4fc4-a59a-10b4bb7ca15f", "sighting_of_ref": "indicator--d9f16c3a-8a4c-40fe-8429-2582e0c90b97", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681cc56-b188-4181-b327-7407b43770eb", "sighting_of_ref": "indicator--dbb57462-307a-4330-b7c7-cbf280c95f1a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72e48dc-a715-41ff-91e2-37b0a8bf0266", "sighting_of_ref": "indicator--dbb57462-307a-4330-b7c7-cbf280c95f1a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cc8f0b-42df-4840-9ae1-cb798a5e6b3c", "sighting_of_ref": "indicator--30e9049f-5e52-44df-b5d9-b7df3e88a4a9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2721e23f-3092-4f08-b9a5-1f067bb7ff37", "sighting_of_ref": "indicator--30e9049f-5e52-44df-b5d9-b7df3e88a4a9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32b1a75-464a-4495-a4ad-7970cf15e72f", "sighting_of_ref": "indicator--26aae94b-22a5-43d0-8e80-2cb3e1c6e618", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833f3a8b-f698-4980-9c4a-9bb4e37271ee", "sighting_of_ref": "indicator--26aae94b-22a5-43d0-8e80-2cb3e1c6e618", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2804765-3ecb-4d73-a5b5-f57893854f30", "sighting_of_ref": "indicator--4e8bdfdb-5f2a-4641-b77e-693e509df0ea", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5be30f-9dbf-4af2-b13f-514dd24fc105", "sighting_of_ref": "indicator--4e8bdfdb-5f2a-4641-b77e-693e509df0ea", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf1475b-92fa-4cd3-af54-5c8eefa455da", "sighting_of_ref": "indicator--fe43ff80-9f85-4c56-8df4-58be96e9ef08", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46af17ce-852b-4f29-8028-cf97891e8131", "sighting_of_ref": "indicator--fe43ff80-9f85-4c56-8df4-58be96e9ef08", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2819097a-2a33-4b6f-bc17-5aa304d8afbe", "sighting_of_ref": "indicator--3cf931b3-3cd6-4378-bfdb-52302acb6e8a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357f7adf-acce-474d-8ccd-66a5f3d490ce", "sighting_of_ref": "indicator--3cf931b3-3cd6-4378-bfdb-52302acb6e8a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0310dc1f-c61e-4852-bfaa-c7aa5231e8d6", "sighting_of_ref": "indicator--56b60c88-b55d-4d5d-baf9-bb94626eecd8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04f8a51-e0b6-4ae9-b541-52715323f908", "sighting_of_ref": "indicator--56b60c88-b55d-4d5d-baf9-bb94626eecd8", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd67ad0-516d-496a-acf6-0ed5bac93819", "sighting_of_ref": "indicator--9aae0141-1b56-40af-affa-47ff0e6360ed", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b2a3f-cbf9-4edf-85c4-3dfbd08db6eb", "sighting_of_ref": "indicator--9aae0141-1b56-40af-affa-47ff0e6360ed", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f0317a-6a93-45ab-8517-433fb75a7763", "sighting_of_ref": "indicator--b51bd793-c710-468b-8b33-43b79ede5102", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494a1612-6cf8-4cc7-8abf-cb699bd3ab82", "sighting_of_ref": "indicator--b51bd793-c710-468b-8b33-43b79ede5102", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaf209f-706c-41a4-a62b-6ea30dd62235", "sighting_of_ref": "indicator--0567b0a9-8b60-4eb2-89f8-637354413ee6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3566274-6946-41e9-bf71-37be672e28b3", "sighting_of_ref": "indicator--a13ef7f0-4779-4e63-920a-660626d5f66f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe92ace-0d04-45a8-9204-4455a67e9405", "sighting_of_ref": "indicator--8b39d8fd-1c02-48d7-a081-7bb193935cb1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3351f741-3493-47ec-9a4c-80d4e38a2ef7", "sighting_of_ref": "indicator--49f6b25f-9b4e-4bdc-85d7-ca966152b5c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59130fe-bb2a-4cbf-b88d-59276283c1aa", "sighting_of_ref": "indicator--6781b907-f437-49d7-a49f-c1b7166b1feb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7eaf44-d6ce-4c88-9f5f-7ec038a5d722", "sighting_of_ref": "indicator--218f174c-3248-488b-ad8d-248342739a94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a57611-6cc3-428e-8374-05977ae347e2", "sighting_of_ref": "indicator--c91d183b-688c-42a6-a26a-531c5e2b5878", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a551547-ac8f-49d5-9411-9463dcdc86ca", "sighting_of_ref": "indicator--baa3a4a3-856a-41bd-a6d5-963e49f3db5f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e6955-d611-437a-88af-923f15e56c2b", "sighting_of_ref": "indicator--66ac8f6c-34cb-4065-b7b2-ab4c334060f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e2bdf8-8fdc-42fc-869c-0a5c2f613310", "sighting_of_ref": "indicator--19ede295-78a1-40cd-b256-84f813f1beb0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8135cf-7afb-4e79-8b9b-f7c3e4b77fb5", "sighting_of_ref": "indicator--1aa5e3ca-1454-45d9-94a0-886b161b56f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572cf383-df79-45a1-b8ed-eb2d9dd82c2c", "sighting_of_ref": "indicator--c103508f-4c51-4dd4-9c63-f933482c200a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddab7d38-c6a0-49d9-8222-7a8325516237", "sighting_of_ref": "indicator--24a477e1-997b-41ec-ba7b-4991710413f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10a8893-4712-4b2c-bb8b-1785744d8701", "sighting_of_ref": "indicator--d8b1d463-1468-40a3-8652-fed4160bbd9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2bb20e-e124-4fe1-80d5-a44ce49521cb", "sighting_of_ref": "indicator--0ebcde72-b419-4f6e-80c2-a3c1cbfcb4d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a133c1-0cbd-4ee3-b4a9-2092b666097e", "sighting_of_ref": "indicator--e331895a-d500-4e73-a16c-875ee207696a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012512a-843e-4f23-ba0d-be5c55b2c7b1", "sighting_of_ref": "indicator--cb9b5644-28b0-463a-8ae5-be3afc474635", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcac4649-0343-4dd4-be54-853dae904a8c", "sighting_of_ref": "indicator--b1275bfc-05eb-4fe9-8d50-81c8a5dd0038", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6a47c7-f282-4b33-a6f8-1cd7d184c851", "sighting_of_ref": "indicator--1fe06dff-3c1d-405f-b79c-7f3b7a424b9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe72d5c5-5287-47db-ab79-f01f98b71a34", "sighting_of_ref": "indicator--52671c48-d146-4cc1-bb22-7eec06c988b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7cf350-4cb8-4244-a180-6460f54d53d1", "sighting_of_ref": "indicator--d90e304c-657e-42b8-b5be-9c5b1ac268da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c8accc-b5a6-42e1-bccc-86eae8241f4d", "sighting_of_ref": "indicator--72284aca-cfb9-4ea0-818e-41796af97098", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0659126a-fe64-407d-831d-36e9927791b7", "sighting_of_ref": "indicator--3adbedae-df20-42be-89c1-50bb9c4392e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a837993f-d54b-477e-a67b-bf286fe9ed50", "sighting_of_ref": "indicator--64cffe66-7f22-4644-b6c7-92124b0dc33d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782cce35-3590-457f-bc4e-f24fa2f320ac", "sighting_of_ref": "indicator--924e894d-65c7-4380-a93e-63509e345367", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee525c69-88bc-4fcb-890d-77dfce42b38e", "sighting_of_ref": "indicator--a2aadf5b-8033-41a2-ae14-66d4fc2f6d44", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a33639-288d-492b-8344-ab6265f294bc", "sighting_of_ref": "indicator--bdcc0027-2afe-472e-ba3a-f6e51ee0b46e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1507bf-7c6d-4d83-b5fe-56344bf33c10", "sighting_of_ref": "indicator--0733b25f-f8ad-4b07-8e4a-ba69f0bea26c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e785e9-ab96-4f2f-9ebd-186cae97ff23", "sighting_of_ref": "indicator--298cbdda-9890-421a-9f6a-f9b007ba293e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05499ab6-9b35-4e47-916d-47d921dd3142", "sighting_of_ref": "indicator--4a2826c3-aac9-4de3-be94-3805600a6186", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd02e09e-d3d7-40f4-a5ac-7b3d1f1b7f9b", "sighting_of_ref": "indicator--c4c228c9-566f-44a4-80f2-01ca3af17dd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2ff93a-b788-4b9e-ba8a-81e3b47b4fb5", "sighting_of_ref": "indicator--969cd5c0-b669-407c-b6fe-3485fd4eb860", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f93b05-3506-4b4b-a7fc-c3ca41d46fc9", "sighting_of_ref": "indicator--df6d4ce1-9a1f-49b7-b31d-bfdc9212fb1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc4abe3-7ea4-4321-8316-e5d5c5644e8f", "sighting_of_ref": "indicator--817b115e-9dc1-4b5a-90b8-e3b3707ad63f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecee129d-29a1-49b6-87f4-105bad69be61", "sighting_of_ref": "indicator--6a9ed1b8-50f4-4eb7-ad89-ed25f652feaa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8792767c-201a-44fd-ab0b-0435970e7011", "sighting_of_ref": "indicator--b9ab7f58-6869-4db8-804e-1e163c334f80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0e63d5-e0de-4487-a10e-8950324836d1", "sighting_of_ref": "indicator--ddd1f42e-ac9d-4dff-93af-0d5609fd7818", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9082a5-4094-45ea-8443-a8bc340b8f22", "sighting_of_ref": "indicator--b84e375a-f325-45fd-9a3c-969c94abea5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d4f502-a40e-478b-9649-c9e24e0a890e", "sighting_of_ref": "indicator--613d985c-c19a-4861-a954-217b2475c520", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5645659f-ec7f-499e-8653-53562b035231", "sighting_of_ref": "indicator--7b3ce253-896f-4800-bcca-fed6296f15be", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225c2202-1260-41a3-8870-1e820c8f1016", "sighting_of_ref": "indicator--ddf13930-c0c1-4e24-b6e2-c117a7913949", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a7fef2-d4be-478d-86bc-6ff81037e812", "sighting_of_ref": "indicator--25bfa0a4-1597-4dc6-8142-f1b31bcca4b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3457c1-4801-403e-b1f7-bdae11fa4a91", "sighting_of_ref": "indicator--d87e27e3-2cb8-4c09-a926-847ff19cf7d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3c5ec1-7f6c-4938-9bd0-c83b68c674af", "sighting_of_ref": "indicator--0d1b9724-e4d9-4f26-a5b2-9f589f06336d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c84fcc3-e90a-4b58-b9c1-8cf23d070d31", "sighting_of_ref": "indicator--6c79138e-becd-4731-a480-6b9b61ffa561", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00a490e-c122-4954-ab2f-b4fc2beb2640", "sighting_of_ref": "indicator--c35de79c-acf4-482f-94b9-7f4eaed99d94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a036fc-91ce-4f49-b353-b1dbba907894", "sighting_of_ref": "indicator--9eb19e40-81b6-431c-935e-ad616fbe5cad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ec07c1-68e2-4547-ae35-ff0ddc7395f7", "sighting_of_ref": "indicator--d1a84ef9-4bdf-46a8-8db7-40b2898fafdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8864e310-362b-49e7-92c5-e5b9a6b1c99f", "sighting_of_ref": "indicator--3e2e3e60-94b1-4d03-9339-0e2800caeaf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d2ba4-3fd7-4872-9cb7-dfb63396dc0b", "sighting_of_ref": "indicator--19b1a17d-4ced-41b3-80d7-27e2c5126727", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb7fb35-e1e7-4c5c-b358-f3c26aa69bb8", "sighting_of_ref": "indicator--c250a9c4-a200-4778-9067-4c6c20bfab83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b55ef4-2e91-4cbd-a92e-5bc484cffb2b", "sighting_of_ref": "indicator--70d907be-e458-48df-845b-d501bb44ca4d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735b9c20-070f-47b2-8bf4-7444edc1808c", "sighting_of_ref": "indicator--c7288858-ae2a-4684-b83b-d18e6ae8bdbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56281511-9517-4a83-9a1f-1a89a16fec4c", "sighting_of_ref": "indicator--7fa9fcfa-034b-43db-8a84-8fe32be2c2b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b5d190-7355-4a27-a676-c32ad44d6407", "sighting_of_ref": "indicator--0e924f86-5daf-40c4-945f-ca9199eafefe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480fb3d1-6ca3-4b04-b191-b687118743fe", "sighting_of_ref": "indicator--7afcc301-dd00-46d7-9ace-64bce67c88fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960ba967-11f7-4006-a6f6-3bda975ce055", "sighting_of_ref": "indicator--28b0ddc7-322b-49ca-b1ae-d1b900237bd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d875d7-8efc-4e37-8ee6-e4bc6d73daf3", "sighting_of_ref": "indicator--bd554a62-7cf0-482b-b57d-b5e7f2cff2b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a19fe01-17dc-4297-b39d-4bfcc9f342b5", "sighting_of_ref": "indicator--227a802d-e298-4e6b-ab15-f5befc7e06ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8bc19f-1aed-41b2-aa32-389d0ccfeb2e", "sighting_of_ref": "indicator--56b6fa38-aacc-41ea-b91f-c6858fd619a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58923b2f-1e9d-4c45-915b-d2cd4b3fd2fc", "sighting_of_ref": "indicator--5160857f-c044-4faa-b8ff-01fe54a0f3e7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf32d41-24b3-4de5-8615-7186228300a0", "sighting_of_ref": "indicator--fc726a9b-a71c-48c4-b408-5e9b80a9d9c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc6d301-b105-4788-9aa7-d84656009989", "sighting_of_ref": "indicator--12d01161-6dfd-459d-977d-01370134097f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6324dcf-4b68-46d3-9e00-4260e7c79199", "sighting_of_ref": "indicator--a6f4fc71-227e-46c8-8002-edf6c5c549a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718e4c2-2bbf-419a-97b1-ce9d1487ad03", "sighting_of_ref": "indicator--09ed76e5-ac8d-48da-b7a1-3066712a6b35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ece1dc-decc-4781-8ead-20176bc09089", "sighting_of_ref": "indicator--767376ab-7d77-4512-b1f9-92dafd74be7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f418bd-674b-494a-956e-9f99c89a73f1", "sighting_of_ref": "indicator--214600c8-83a0-4322-ab37-3d210ba3618e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775ff216-e4d1-46de-92a8-b2a657412de4", "sighting_of_ref": "indicator--82094f74-be19-4ff6-8bc8-ceca53cd23c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78881ced-282e-45b1-89ba-2e51190c3570", "sighting_of_ref": "indicator--013ba3c7-d71f-4e0b-8eb5-9e717d363414", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3183527d-f6ae-4e8e-8e90-1c600db1e2ab", "sighting_of_ref": "indicator--684b7615-4da7-4b5b-8c34-e3ac44634a13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b444351-2aa3-495f-9dd0-27eea9d54b0a", "sighting_of_ref": "indicator--40e8d64e-579e-4fea-84ae-e07f9e031826", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bca9e0d-8a1d-4c1b-943e-60976715ab30", "sighting_of_ref": "indicator--27abc732-59b9-42e5-a489-8f6d35d9d41b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a53fb3-b5f9-498b-8ae2-b411dba76c35", "sighting_of_ref": "indicator--895c5007-e36d-4d32-9c0c-f14e2effacd6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc53b0d-00fe-451a-91ad-903597bdf5ea", "sighting_of_ref": "indicator--4a29ed5d-ca4a-4817-a9b3-e1ad995a3968", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b5759e-8c36-4154-b063-9a373c6e73a6", "sighting_of_ref": "indicator--10881a42-9b35-4c39-a765-cca43eb91267", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd5932a-9396-43bd-a807-9676cd2d1b3c", "sighting_of_ref": "indicator--cc60a77c-3b29-4c29-9f1f-032d8304d2ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d72a5-10b1-4395-a66d-a4ce64b123ed", "sighting_of_ref": "indicator--d8b8f0ba-6395-47e1-89e3-154c0c44b15f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ef30e0-1571-4e25-b852-2d0608f9a4b0", "sighting_of_ref": "indicator--cd1608c8-d1fb-440e-ab68-440bb7aa7de9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43587e79-a3ad-4e0c-a63e-5ad7e853e490", "sighting_of_ref": "indicator--bab6d946-c319-4b2e-bff9-3a6e74885db6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b71004-16e1-4aaf-a8e5-dfa33a35d46c", "sighting_of_ref": "indicator--02623bf9-8ab7-4e63-918b-c30778256fc3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28f1aed-b32c-4d4d-90af-67baff747098", "sighting_of_ref": "indicator--cd577793-4015-4c54-820a-4beaf01e13d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9422478-e125-4f01-8c4b-f5abf4f2915f", "sighting_of_ref": "indicator--c652f6c2-7b9a-40b8-a12c-00ab20a82e71", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405350b4-cf96-43a1-994f-35b15e9df447", "sighting_of_ref": "indicator--88e86666-432d-40a7-b55c-391a0abdc40e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f822f-b2f0-4472-a34c-937e7fd68249", "sighting_of_ref": "indicator--c773f9e1-8bef-460a-9410-8a068583cdf8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62ee125-2048-4ac0-8c70-58c7b33bc579", "sighting_of_ref": "indicator--a10b4ad9-de96-4ce7-a429-1c0c3d886d37", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a4a22-0aee-470b-8249-536c937b836d", "sighting_of_ref": "indicator--ed95fd73-c967-410b-8ede-3fe001da18cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa2d5f8-db75-46d1-9865-168ac644e113", "sighting_of_ref": "indicator--f02163fd-8c7f-4ae7-befe-3343092de34c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6743f64-60e2-4688-92cf-6caa2514867e", "sighting_of_ref": "indicator--7dccdc17-d5b2-402c-951b-baa1f677a5cd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b556732d-f76d-4779-8059-4a3aec09c6e0", "sighting_of_ref": "indicator--9696988e-14f2-4702-9bd0-7e856a4cc4f9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f282a06-0ad4-4677-92b9-637352f8adef", "sighting_of_ref": "indicator--8e8e7042-3665-494b-96cc-ebb1b87dcd85", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5b7c35-5050-40bf-b2a8-235375224f74", "sighting_of_ref": "indicator--94fd1a76-6500-4dff-9cf9-e274240b6989", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c48988f-5859-4bcd-b428-e8a9d74ddcba", "sighting_of_ref": "indicator--e6a979e2-5201-43af-81ee-494d447ac87c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5249d35f-35d2-4099-8eda-25f11880f6ad", "sighting_of_ref": "indicator--e0a7f4b5-064d-4f03-a97d-40c34ec5224a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2f7779-73bd-4068-af3b-c6bb40913b0c", "sighting_of_ref": "indicator--414670af-4d49-4657-9dd0-a47b42137813", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f91e59-f78f-4e1c-940a-047869527e4f", "sighting_of_ref": "indicator--e05be48d-6111-4566-b8c0-ae52a01add63", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b890b717-5f2c-4af0-8de8-c7c34cdeb9ca", "sighting_of_ref": "indicator--5a1e708b-458e-4d05-b492-ec54a902e3de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee479c7b-0a7a-48a8-88e5-796f4afefa6d", "sighting_of_ref": "indicator--54c85c09-89ed-418b-b708-202d1f6d8749", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0027ea42-e556-41c5-9aa1-1b844b1071ef", "sighting_of_ref": "indicator--eb8409f5-71a8-449f-8ca6-203190fcd0a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe352c3-a36e-4b0a-b76b-293a1771e521", "sighting_of_ref": "indicator--69b4eaaa-0776-42c0-a39f-7e1128f6519e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bce822-a3cb-4131-8fa3-a6a51fbea76d", "sighting_of_ref": "indicator--df200250-39e1-42be-ac57-e556d224ca2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2d2585-585b-40fe-b66f-7c23e11dbd19", "sighting_of_ref": "indicator--22fc0c9b-3896-4aef-9cc3-b7b80c183926", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdad32dd-2316-4759-a733-4aafbe009732", "sighting_of_ref": "indicator--a0b5db64-b191-460d-80e8-b4d3a9d9de03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63ef5f4-15ff-43ef-bedf-602972b2bd6d", "sighting_of_ref": "indicator--ce6fa651-47de-46e9-b7d5-55ccd86239e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22a301-6671-4c21-9371-63684e225131", "sighting_of_ref": "indicator--b5443197-5dec-46ec-b5f0-f3930d11bce5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a306fcc1-b487-408c-957e-b9d9b7e590ea", "sighting_of_ref": "indicator--62300178-6145-42b7-821a-2dc456289759", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff36f4-bf63-4d5e-9569-4b69e335bd32", "sighting_of_ref": "indicator--62300178-6145-42b7-821a-2dc456289759", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c6a668-2367-4234-8586-85051b406c30", "sighting_of_ref": "indicator--62300178-6145-42b7-821a-2dc456289759", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f5c1df-92f1-4c52-a0ae-9bf50c6096b4", "sighting_of_ref": "indicator--2f6616c7-5455-4457-ac8e-95133cf165a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0123ec7-2806-417f-bb03-a0177ab6e33d", "sighting_of_ref": "indicator--833a29e7-9308-4c45-9d68-5ff6033e9ccc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e4e26-12b6-4d8d-b21a-73c48fb05045", "sighting_of_ref": "indicator--ad4a5b47-c4ce-429e-9243-7eb6004562f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bfa220-6f9a-4810-ab77-b977d6791aac", "sighting_of_ref": "indicator--852726c1-25ce-4c08-93a0-aae88ff8c93e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20c0e40-9960-47ad-b075-1837c86a8998", "sighting_of_ref": "indicator--7a0168dd-11f5-4f46-a62a-f35c92064421", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e0e71b-92ed-4dad-bf5e-1dab2c389763", "sighting_of_ref": "indicator--e2cc3e78-0e02-44df-b05f-5b49626dc4ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b668ad0a-4ae3-4723-a1cc-b14a4d1a66b8", "sighting_of_ref": "indicator--7d308644-bdf2-49fe-aa5a-61c9e08a53a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bd042b-a663-46e8-9aa3-5bcaed9d2058", "sighting_of_ref": "indicator--6d52c20b-f90f-4280-8f9b-1b44ffc0f51e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ffdd8e-fa91-40b2-a039-a7c524171b68", "sighting_of_ref": "indicator--4172640d-97a0-41e1-bd48-fe3eae9424a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0456d67-1b5d-4186-a2cb-62b44e9812c4", "sighting_of_ref": "indicator--a8135eed-9caf-4be0-919b-26492ef14615", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a22ebe-75bd-4f1d-ab97-56121fb26d11", "sighting_of_ref": "indicator--4c8268f1-690d-4e1c-a773-dabdd6ceecc6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7c29d1-f154-426f-b5af-859bac1466f9", "sighting_of_ref": "indicator--7440c6f9-7499-4c0e-8427-a1c642be5205", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727450b-4b33-41aa-8a6b-8c9a3b84ee62", "sighting_of_ref": "indicator--75743634-9d1a-49e2-bc50-243e180ae710", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69fb824-71b4-4430-af37-c32ce72dac5c", "sighting_of_ref": "indicator--28b13ca4-413f-4984-9586-448331a0f47e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdbfe04-2dd2-4240-b434-315e6f158cdd", "sighting_of_ref": "indicator--b085ee6b-2f65-447a-81f5-6e493c67a955", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5b5cd3-eb84-4de6-a62e-e4c4c1f93752", "sighting_of_ref": "indicator--5d54a478-262b-477e-ae5a-ab3a296974b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad91d92-c2eb-4b76-9932-a906069699de", "sighting_of_ref": "indicator--7d75d600-5bb3-4e27-a878-a88e17addb7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fff7c4b-997b-4496-a02c-9b6e03ff46eb", "sighting_of_ref": "indicator--c9dbfdb3-6cbb-46e4-abe2-adeda13e2130", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb71dfb5-442b-4dac-a824-582b7c45972d", "sighting_of_ref": "indicator--8aaa28e3-8738-4b99-b8cb-2b85ba7f9a53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb40f1d8-a82b-4043-9887-8d317d649605", "sighting_of_ref": "indicator--4726bc95-6a1d-43b6-ab71-62a97c1dc621", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a88d309-7a97-4f5e-b5ce-7f7d95f5e5c3", "sighting_of_ref": "indicator--7eb22418-fb49-4f8b-af3d-9d8e99714bc3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85059ce6-5eca-4189-9460-580045a86de7", "sighting_of_ref": "indicator--4893d21a-db75-4971-ad27-4c5ad56447b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f3c656-5175-40fc-b972-95eef59aa042", "sighting_of_ref": "indicator--ba8babd5-0d23-46a9-afb7-1e9bb342687e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f043313-a85e-4d31-a19e-54b30c93b55b", "sighting_of_ref": "indicator--54c8f859-ac61-49a4-8729-785325c6a769", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42acf019-0ae4-4f34-b9af-d789e909badd", "sighting_of_ref": "indicator--20e99129-3a00-49e0-a2fd-3eb3e8745d27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59504b1e-6315-4391-944c-fe66e64f30db", "sighting_of_ref": "indicator--def5970a-1988-44d3-bbe1-87dcbf3cd0da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2bc2be-5790-4b8d-9828-5eba16084996", "sighting_of_ref": "indicator--7b4927f9-ebcd-42b6-bac5-94a456839415", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0729b756-ae20-4ef5-8ae2-a282925fb664", "sighting_of_ref": "indicator--33d92b4e-3c46-4672-a93c-8bcdd6ba5a83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431c4cc7-c678-4fe6-99fa-a078bafe4406", "sighting_of_ref": "indicator--a9eeb7b5-995c-4edf-8894-0095dcd2523b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6c26b1-5e13-4f53-a4bb-c73fce2cd78c", "sighting_of_ref": "indicator--c97b6318-0e3b-4b0c-958d-9227834c9bb4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c169535b-f1af-49df-9593-eb472d7fae13", "sighting_of_ref": "indicator--d6d6eec4-5e90-4525-8275-303960666276", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ae50a9-4657-4b8a-b4de-abfc38d5ec74", "sighting_of_ref": "indicator--90763a00-29b2-497b-9549-2f4f88f257e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a214fa-e70f-477e-b147-1ec6f3de83c8", "sighting_of_ref": "indicator--bc12dcb6-c974-4439-a477-ceffd734c892", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb4b14f-7107-4569-a40f-665421410b38", "sighting_of_ref": "indicator--f444587d-69ea-4a96-9e54-e1a8a3da0ee2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f3100d-d55b-491c-b40c-ad7ff501e434", "sighting_of_ref": "indicator--d3633d37-aa50-4b07-a480-ea01582cc228", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68edbb67-4056-4d08-8230-0b18369cac71", "sighting_of_ref": "indicator--1787f48d-e55f-405a-8eab-2f6b5b8dd88c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5220ddd2-5d27-4aa4-8f1f-925d6fdbcf89", "sighting_of_ref": "indicator--6c1f9aa7-ef7d-4a05-972a-2bc2d9e01bf8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e3a0c4-e556-464a-991d-a09404f3fee9", "sighting_of_ref": "indicator--cfec88db-d47f-4bfb-b16b-84a8b91ac0eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e6c83c-fe87-495e-a9d6-14ceb2f2e2e4", "sighting_of_ref": "indicator--c6cc9fe2-20f1-4610-836e-0efb760facc2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59e3bff-41aa-4afb-b254-2f7c213e5277", "sighting_of_ref": "indicator--4300686a-ffff-42ef-b824-5b29463fb06d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d84410-c3ae-4520-a7a9-2001abc13bdb", "sighting_of_ref": "indicator--856b70df-d200-4efe-8609-16924b6f1a67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9223d0f5-bc3a-4a75-9b37-4afff08bf1fe", "sighting_of_ref": "indicator--d33e49f0-7963-4fdc-b447-56ca3f598e45", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a697133-feef-4aeb-abc2-f35369756c88", "sighting_of_ref": "indicator--87f8bd7d-d9ae-4434-84ea-9e20b79d6e2a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c00a633-7561-43f1-9b46-8718365e2878", "sighting_of_ref": "indicator--87f8bd7d-d9ae-4434-84ea-9e20b79d6e2a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa5512c-3624-401d-b6a2-7bead25b3a77", "sighting_of_ref": "indicator--1837893b-0398-4d56-b8ee-17445d9b0051", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a12ffab-e426-403c-988c-cdb2fc3faa87", "sighting_of_ref": "indicator--bad292c8-1f70-4372-ad7a-cf95d381dfab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab4c322-551d-4ffc-b90c-92654442b7b9", "sighting_of_ref": "indicator--46f67aa4-4de5-463e-90e9-bf5bfc614b14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae1636-d282-46c9-8599-53e1f920eee6", "sighting_of_ref": "indicator--5d31270e-0ef2-42bb-ac06-80a18f3366b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1685174-79b2-40e4-9a38-5275242bda82", "sighting_of_ref": "indicator--dcdd86ce-3458-4e87-94ac-15605962855a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1880d8e0-1ca5-40c2-9f1f-4615d7a9a510", "sighting_of_ref": "indicator--39534d57-e4c0-41fe-82c2-2d26c85b7e9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3cdcc3-b5d4-4f91-af00-37ed32beba24", "sighting_of_ref": "indicator--5cb4c1f2-5d96-474a-9fe0-fb21393d94d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222cdc90-ad55-4d66-8400-742219531329", "sighting_of_ref": "indicator--87459ff0-31ba-410e-8c56-b230d66a15bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f842309d-72a2-42a8-947a-fde49ae47615", "sighting_of_ref": "indicator--d2e25577-1d2f-4cd2-9652-9da457d3ff49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da21b4-d05e-4ff1-9436-b2c2ff3eb626", "sighting_of_ref": "indicator--b3e1754b-f34a-49d9-ae33-f57c09de1063", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80e84f1-dd96-4bc6-91e9-c91903a3cddd", "sighting_of_ref": "indicator--b3e1754b-f34a-49d9-ae33-f57c09de1063", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4078c6b4-1c99-4c3f-ad4b-997f2923fe8e", "sighting_of_ref": "indicator--4610ebab-67c5-491b-abd7-3ffdb944764d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4604ce-e4d4-43b1-9edd-771b1a8814f7", "sighting_of_ref": "indicator--4610ebab-67c5-491b-abd7-3ffdb944764d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a135859f-867f-4f79-8b49-af3f6a92b777", "sighting_of_ref": "indicator--e297526d-32dd-46ba-9637-69028c032081", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f4814b-c69e-4ab6-810b-38cfcb143608", "sighting_of_ref": "indicator--e297526d-32dd-46ba-9637-69028c032081", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fead66-b683-49c4-85f9-66cb9fb58147", "sighting_of_ref": "indicator--9d9b8a66-8a72-4a3b-8e99-d7607a51c7c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb62fe3-4324-45fb-a7f8-51bc897f4d25", "sighting_of_ref": "indicator--b18551cd-c6e0-44f8-bdc0-991fdf6dd3f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37422980-c814-4832-9aff-c5c1d15eb9db", "sighting_of_ref": "indicator--e5846b3e-358a-4388-b6ce-2c80a84ed5da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607ca7b9-e07b-41e8-a2ea-fd3e2bed98c3", "sighting_of_ref": "indicator--7bca0af1-0500-4f47-bd2e-c46e963f6b0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d340b55-87e2-460d-9d1f-50c73a404d77", "sighting_of_ref": "indicator--7bca0af1-0500-4f47-bd2e-c46e963f6b0e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a96ec2-4568-4a8f-a3b6-3c574a2d8fc5", "sighting_of_ref": "indicator--1643bac3-31b9-4469-9302-1435da1a31d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85cd806-a9d6-416d-b226-6d5861cf0139", "sighting_of_ref": "indicator--f5361c1c-674e-464e-88d6-8e462132c208", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cea30de-d65b-4232-be78-7b13840c8b41", "sighting_of_ref": "indicator--69ae7e90-d648-43c1-b7ee-0db77e353b05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00309998-85f5-4e93-8f0a-782440e99644", "sighting_of_ref": "indicator--e84e4003-97d9-4e81-a24d-7f27ceed7730", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443511d7-715f-428d-a7ef-e64f36c30a87", "sighting_of_ref": "indicator--858b69b3-95ed-4813-90b3-c50f866caecb", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cef33cb-d672-4740-bb79-dcdab1d11e30", "sighting_of_ref": "indicator--f3d45f4e-453b-460b-89a2-f24a25b6a5c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5351c1da-f6a8-4101-8ce9-bc07c017e250", "sighting_of_ref": "indicator--600e274c-94b3-4b7c-93f6-aae02b82883f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23ac522-e25d-461d-949f-6c0fad787dd7", "sighting_of_ref": "indicator--b1812716-3902-4701-bb19-8ffcaa414b5a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf73f1f8-bdc2-4466-b6c7-e2458f699aa2", "sighting_of_ref": "indicator--edc1299b-97df-472f-a40e-1dc9c7d0261a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff0f9e6-b4f3-4f8a-b42d-15961b0b8dd3", "sighting_of_ref": "indicator--24b73c6f-1e99-406d-88bc-206d61e559e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a4ac9-d89e-4cec-ba64-ec43ff0094ac", "sighting_of_ref": "indicator--1dcb1d84-9c94-4a34-b5f6-f03ff816bfb5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1d2e02-7a93-4ab6-92be-2d28b09bede1", "sighting_of_ref": "indicator--8075e350-6b80-4c96-8c06-070f466f0819", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde20a9d-e4e1-4e5c-ae8b-fe7fbfa8cd31", "sighting_of_ref": "indicator--70be444e-8244-4c48-aa4b-7b8b08d1ee46", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d429d7-d49c-42e1-9893-45ed19e47f0e", "sighting_of_ref": "indicator--9a231716-05c9-4d48-95a9-a933cc5d2d06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8465d8a3-0830-4974-8d30-97ed95a76f7d", "sighting_of_ref": "indicator--1ad2f9e7-4e9b-456e-83b0-c2188a65c542", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71aa1cd2-1a24-40e3-90d9-0c6d7b0c6aa1", "sighting_of_ref": "indicator--4529fdcd-0505-4ea5-bee1-d49909357978", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73708398-1a78-49df-b4b4-e138c3fd6119", "sighting_of_ref": "indicator--6c4d0d15-faf0-43fd-b698-5747c29ab8d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4978bf27-c2f6-43e0-a2d2-0cb601e0aa11", "sighting_of_ref": "indicator--a7d0cd2b-b48e-4e78-b564-42abc6ea0ea5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d6a097-770a-4e85-9602-5027986239a1", "sighting_of_ref": "indicator--536c9f3b-ce08-4767-a808-9db526f32430", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11423583-31f2-4d3a-b8ef-93285fea1487", "sighting_of_ref": "indicator--69396d6d-43d9-472c-b7dd-ac963980b7fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cfea38-103b-4afa-8bc1-cf5e37c1e777", "sighting_of_ref": "indicator--ef9b6201-fb28-4ff3-8724-967475a2fa04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febc159a-b171-4dcf-b73e-dcb5b2518795", "sighting_of_ref": "indicator--d4c8ad99-d959-4437-9846-19d16e7078d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f596378-b187-4356-b4c2-1a99cec0f0bb", "sighting_of_ref": "indicator--8058d97d-1534-44b9-b6c0-19cd123b80e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46cb516-e515-49c0-8083-9b8e3d6ace41", "sighting_of_ref": "indicator--98980eb7-5e66-4ca3-9ba6-f76a8af197d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94eec2b-8d09-491b-9cb5-3611b31edc32", "sighting_of_ref": "indicator--fcfe57de-dd4f-49ff-aaf6-5731428f1a7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c246a9-05b3-4b21-9fd8-5490a60a7e0c", "sighting_of_ref": "indicator--1f138e4e-ce43-4e0a-a3cb-07b5b3b37f22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f3b95-9795-4d0b-97ef-740bc577d191", "sighting_of_ref": "indicator--dfd6f66a-d740-4701-a87b-5ab9d426a6c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74f49c6-b4d0-4bcd-8a2c-a79d617e1b46", "sighting_of_ref": "indicator--578185a8-0d0e-4608-b57f-ccb5704a0165", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62939303-ed30-4e25-8666-e123600c6d3c", "sighting_of_ref": "indicator--40900fbb-c2d6-465b-8b61-cd45a344e5f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c7d716-66a9-433e-a301-71f8f13ffd9f", "sighting_of_ref": "indicator--586cc18c-ee0f-447b-b946-d8727d12c4c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b303eb92-e790-49d9-aff3-ad9792ff1384", "sighting_of_ref": "indicator--3664039b-89cd-4f6e-bee6-c0df624822d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6c27d5-17ce-47eb-b021-8da119126df7", "sighting_of_ref": "indicator--4f2e91d1-71ac-467b-8e73-718fdde9120b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12c8562-0bd1-40c1-9fdd-c82679c16aed", "sighting_of_ref": "indicator--e8d4d8b6-f0e1-4236-b4bf-e687658e6b73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e22ce46-c83f-44cd-bb74-1d3929ff689d", "sighting_of_ref": "indicator--945fab97-2752-46f5-845e-2daadebded56", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0e3998-50eb-459a-a10c-6487b4748441", "sighting_of_ref": "indicator--1a905dcc-4bcc-4247-8e8a-482c91497002", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b629ce38-ad10-4893-ada9-49ad301da62f", "sighting_of_ref": "indicator--a0675907-f648-41aa-ad9b-91a63f37fae6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01374f8-2530-4a92-a8b6-d32824c155fc", "sighting_of_ref": "indicator--108125ba-2875-4548-9b49-b0729fdfb2e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2d8f7c-a303-455c-9188-235cda595990", "sighting_of_ref": "indicator--85667c0f-0753-436c-8433-fe3889e3d25b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e34cc9-0117-4c8c-8b19-6c759ac5a488", "sighting_of_ref": "indicator--877908a6-8aee-4c5c-aa72-e41042ca5d4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bec9ba-4b98-4dbc-8753-082b203e1b0d", "sighting_of_ref": "indicator--d6a9bbae-7857-472a-97e3-9c6e62e665c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea114dd-7699-450a-aa5d-aa00a1952530", "sighting_of_ref": "indicator--eca4a15f-1b66-4806-ae07-e4f9d4a5ead1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58e667-70a8-4049-a299-f0a2b4aea6d1", "sighting_of_ref": "indicator--06cc35bb-a89d-4ec4-850d-50e7d9e6cd78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d2b009-7bc0-4589-98f5-fd01f4a40fa5", "sighting_of_ref": "indicator--3cf69280-01b9-430a-b0b4-03d2ceaf8b1c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2456e6-9f07-4452-8682-814e2c0c1a81", "sighting_of_ref": "indicator--4e19ab37-f12d-44fe-8910-21c3e8bcbf78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287ca987-912e-4039-b5d4-d0d07b5876b7", "sighting_of_ref": "indicator--9a3c0cc3-1824-4cb7-9039-e4e020301cfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2986d0f8-0431-4494-97dc-12b978103baa", "sighting_of_ref": "indicator--29c4d41c-82c3-4447-b57f-2c3d65073d12", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729f6716-36b3-48a2-8aec-67db6f932930", "sighting_of_ref": "indicator--36cb3178-8283-49d9-9958-82e301d21b81", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a8fc4d-e852-4f61-9b1f-ef4b3e413a28", "sighting_of_ref": "indicator--7515107a-e031-42c4-804f-04e5cbfb1075", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c80a2c5-c9fc-4f40-9035-2cb7e4c339ab", "sighting_of_ref": "indicator--888f6833-2a56-4eb5-b883-86abcf07ca9d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca9c532-372b-4a94-8061-870803c3114d", "sighting_of_ref": "indicator--29b765a5-2dfe-4f5f-a17b-5fa706bcc0c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2e3d6f-cdfc-460a-8a94-464f9a13e930", "sighting_of_ref": "indicator--8d721c49-01be-4aea-b3a2-6d91c2cee802", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf10cd3-ec43-4177-952d-e6ef4a5e50b8", "sighting_of_ref": "indicator--8d721c49-01be-4aea-b3a2-6d91c2cee802", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7dd18f-7848-46c5-8dff-cd7c957d2887", "sighting_of_ref": "indicator--363576be-474b-4167-8457-3df6755e7ccc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e884ed-06a7-4e31-880c-c6604dccdc1d", "sighting_of_ref": "indicator--6fb75fdd-1cd1-49e3-8fb1-2ce49e4f8690", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef865514-540a-4d0b-937e-c69ab6aa1cd8", "sighting_of_ref": "indicator--5f82bd06-ad22-44fe-9808-071831689dc7", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f5bb81-f995-4049-8483-30c9f18d456d", "sighting_of_ref": "indicator--a7b9678d-547e-4444-ae49-8d1971d42070", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfb81bb-9419-49c2-906d-da16ac0df300", "sighting_of_ref": "indicator--a7b9678d-547e-4444-ae49-8d1971d42070", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d170f8c8-9da3-4aa4-b889-92379532de9c", "sighting_of_ref": "indicator--592fb7dd-6e9d-47bb-8a4b-6adc9a836a0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35327682-ba2b-49b9-ae21-c1ccbf6e21bb", "sighting_of_ref": "indicator--784e5a0f-92cb-4990-b8c3-6eabf0d36473", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429e4b0f-da50-4f72-afe1-09111986396a", "sighting_of_ref": "indicator--1557fb3e-ab4f-4e2b-9719-5d7ccfefb74d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ac5e8b-57ee-424a-8723-06257ab9b6e1", "sighting_of_ref": "indicator--df9fb77f-1f13-4782-b73a-77a783b1211a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b81f06f-c65c-4734-a6cc-9bfcd173240f", "sighting_of_ref": "indicator--8ce51465-92c4-4dfb-b99e-0dcb74a4ee6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e26a75-01cf-4044-89d1-d0431d6dcb4c", "sighting_of_ref": "indicator--271257ca-f7c3-4b85-9eb1-c8ffbd83a789", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaf595a-07a8-462b-8f94-5afbd792bacb", "sighting_of_ref": "indicator--41edfadb-0709-4660-9652-814a421fe72f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01446fbc-e9ac-40ad-921f-f22f865977e9", "sighting_of_ref": "indicator--bbc702f0-4dd2-4548-a3fb-49fff19dd93f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b94c64-6b26-4ebf-bdc3-bcb6632c486c", "sighting_of_ref": "indicator--9a34442f-c7d9-46d3-a4eb-0057b6c5c0db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28fdef4-62da-4f7a-9014-716acf6a8cb4", "sighting_of_ref": "indicator--f881098b-2a7c-44f8-9dab-844acfaa9b47", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7386c8-2c06-47c3-861f-ee28263afc3a", "sighting_of_ref": "indicator--b7793993-27bf-48a0-83fc-25b536dda1e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0655052-e198-492e-a155-f41619845d1b", "sighting_of_ref": "indicator--ccdc3fc1-5c2b-4ac7-b7c5-cb806804cf77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b109874c-8c40-439c-bea1-cbf52664e1ad", "sighting_of_ref": "indicator--be03a616-5f02-471b-8796-e699b52a0395", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166b766-7667-4907-ba7f-6ac4b865bdbd", "sighting_of_ref": "indicator--25f493a9-6314-4f21-97dd-6d6613192606", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b255fcc8-f1cb-4e5a-84e9-eaa323661339", "sighting_of_ref": "indicator--0832212c-0db3-479f-82fa-c86369ab813e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e4303c-e166-4ade-a545-0e702e8829a1", "sighting_of_ref": "indicator--470301a3-2222-4e93-ba85-dba4cea149f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97298695-3f48-4669-ba1f-ca3469cb5aaf", "sighting_of_ref": "indicator--92826c9c-4f04-40c7-af57-ab987b680ec7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467aa70d-229e-47a3-9eab-455322f88fa3", "sighting_of_ref": "indicator--b078e76f-1986-4663-a4d4-73edd92bc658", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eaf416-55fe-44f5-a626-542a80c8af7b", "sighting_of_ref": "indicator--85e667bc-18d5-43fe-a5f6-62d81f90bcb8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ab6f12-8446-469a-a5b2-8c07e922e5d1", "sighting_of_ref": "indicator--85e667bc-18d5-43fe-a5f6-62d81f90bcb8", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564daa8-0157-480d-b0b2-0960e0990e8f", "sighting_of_ref": "indicator--85e667bc-18d5-43fe-a5f6-62d81f90bcb8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f828fb-afdf-49a4-8a80-b47f7d88ee43", "sighting_of_ref": "indicator--c99d75b1-b0ac-485b-b961-22bf4564cd6b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9759c2f1-a03b-438a-8ec8-8e8c2795987c", "sighting_of_ref": "indicator--c99d75b1-b0ac-485b-b961-22bf4564cd6b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cd13b7-07de-4110-a17d-f278c9ff7fee", "sighting_of_ref": "indicator--c99d75b1-b0ac-485b-b961-22bf4564cd6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2576ee-e587-4744-a360-a8d502bdb029", "sighting_of_ref": "indicator--af736dcc-dbd6-46e2-9c1d-161bfee40dde", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadbc41d-31fa-445c-adf8-94c325fc2845", "sighting_of_ref": "indicator--783f362c-8fb6-4522-93b9-ce8412997706", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5c4f52-7a3c-4df7-8aa2-206234d9a115", "sighting_of_ref": "indicator--b8b35148-e43b-4c3f-be86-2f1c68a06cef", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5651ab7f-72f9-4796-b2f2-76b9e4c7ab1d", "sighting_of_ref": "indicator--c3def369-f51b-49fc-878f-451bb7376ed2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19820040-14ae-4df4-b5e7-755d73cd50bf", "sighting_of_ref": "indicator--541382ed-960f-4626-8a5f-d42360ceb33e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da74bba0-1da4-4f0a-ab7b-9dff4f68928a", "sighting_of_ref": "indicator--c206720e-90b0-4b9c-9613-c3861d796555", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070c7200-5791-4f86-98e9-caebe7926740", "sighting_of_ref": "indicator--fb0d544e-a90a-4070-9bc3-9fa6dc6f827d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ad4377-0905-49f2-980b-597123afaa04", "sighting_of_ref": "indicator--741c540d-796d-4394-89e5-6a8647418a22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab0f1e4-a3a2-44f5-ae9e-a3b35360fe65", "sighting_of_ref": "indicator--972325b5-4f8a-4fb2-b82d-203c3ae103ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69e7a66-a1ca-42f6-b4b7-8408029b9a95", "sighting_of_ref": "indicator--0250692b-2e3d-4630-9757-30fea777a804", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b393d2f3-b351-4183-83fe-e28d8dffef24", "sighting_of_ref": "indicator--30448c4e-f287-4e5d-93cc-200ed109eafe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c560c3-3c44-4dbf-a823-fa388ea9dbd9", "sighting_of_ref": "indicator--39c21934-b428-41a9-ba78-b2e18ab3a177", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da91e82-d594-4af2-b3e1-44f142a36c39", "sighting_of_ref": "indicator--1e2bd6fa-6494-49d7-a99f-8d0a764bb904", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8184fcf8-0da3-42d5-b066-af0a269c824c", "sighting_of_ref": "indicator--1c593a0d-47f3-446f-b063-e8058834be22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffcc0ea-3084-44d1-8163-449cd48179d0", "sighting_of_ref": "indicator--dae35c84-b7f2-46dd-85ac-6ec027bb772f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70297d8-c762-4c85-8d08-a353348beb6f", "sighting_of_ref": "indicator--6a4db56c-bdfc-4d4a-aafd-41099f76390a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70db4b4b-1635-42b9-9b6a-6074918932b2", "sighting_of_ref": "indicator--02e2f92d-dd08-4448-8e36-8b867a2cb9a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217211ef-ef37-4183-853e-25348fe57eec", "sighting_of_ref": "indicator--946919f6-8e9a-4f14-b2dd-4153d6aeda0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024ce1a9-f799-4676-8c70-232350be5495", "sighting_of_ref": "indicator--842eb783-a429-4d36-8c11-6fd226e20784", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01439ea0-c35f-4fa7-8907-e496588c0af4", "sighting_of_ref": "indicator--560f3165-4824-455f-9f91-c19f05ea2326", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104c56fb-035a-4366-a2e7-d3c21dcc7304", "sighting_of_ref": "indicator--008511f8-5139-4518-a3c6-9da23d31d7fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c606c4b-73a0-4851-85a4-1223f1997076", "sighting_of_ref": "indicator--d0fd1169-bd68-4fdd-8826-1fe69eda2a13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3571f312-1d1b-4cb1-a024-fe92b5ec3e50", "sighting_of_ref": "indicator--8617540b-bcbc-48bc-b95c-0c51ae28eb29", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e699fd-b399-4b14-bf13-9344dcaba3f1", "sighting_of_ref": "indicator--0096b362-4b56-433c-b998-ebbe1a6b3452", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd6780e-6b3f-4546-baad-7f714f8a592e", "sighting_of_ref": "indicator--47a2df9e-8ff4-4d3a-b06d-13f60222399e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ca8cbe-71fc-49ac-88ec-167e3d70b341", "sighting_of_ref": "indicator--0ed313a6-acab-45d0-9e4e-b60febd75835", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa491ed7-378e-4110-8dc3-410b603baf19", "sighting_of_ref": "indicator--6d369efb-e19e-40dc-9a49-d5eaca4d8a40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636b7d32-a785-436d-ba44-c555bcc4b65e", "sighting_of_ref": "indicator--747373c6-72d0-472d-87c7-c6081b04ac9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ca6758-2db8-49de-a814-ddc61da5f32d", "sighting_of_ref": "indicator--8bf9f993-c1e4-41e7-933f-87b7d5baec2c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1c5923-b759-4a93-b943-d5df01d5cdd0", "sighting_of_ref": "indicator--50d1078f-2e38-4943-9080-35490e5eebbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cd225c-ba61-492b-b7b5-167cb08fd9cb", "sighting_of_ref": "indicator--c06bbe3a-c572-4f82-bcf1-958d184bddd0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d5f9a6-537d-4611-8b2c-cc4897aa8fd2", "sighting_of_ref": "indicator--51f76a10-f38c-411e-8795-b27b27135186", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e489d7-a5e7-4608-a7d5-97d35f58b746", "sighting_of_ref": "indicator--2118bde9-8fa7-414c-8ea9-740b96129e34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e5bbd2-9bef-4955-97c5-fc8615322cf6", "sighting_of_ref": "indicator--1e31fcf3-9871-43fc-83de-cfb8481689e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8edecf2-ce29-4efb-b834-a1bf9c9da23a", "sighting_of_ref": "indicator--bd81631a-faf7-47d2-be79-d768dc10e867", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e11f1d-75d9-4db8-87f4-813e08df5f1f", "sighting_of_ref": "indicator--f4b1ca00-7e13-4482-ba9c-8b353fcb5cad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14e175f-6ca8-423f-ba9b-42080e07cffc", "sighting_of_ref": "indicator--073f393b-ca6c-4563-aefe-e938ef0d2cd6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48258173-4ef3-4548-81b2-67b5d0558886", "sighting_of_ref": "indicator--cc0610ff-0af2-4c1d-b740-5b77363b77fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b33706c-9afc-4d26-b826-31f538464fa8", "sighting_of_ref": "indicator--da48b2f4-04b5-4be8-a77a-a660008fcb89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7886ffac-b43a-4a47-a057-d3bc0d9e0103", "sighting_of_ref": "indicator--cb58ed9b-d970-40d8-b6a9-57bd6eb3d1f0", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d977c7-bf0d-4d9f-96c9-d92511b76d0a", "sighting_of_ref": "indicator--10bd6670-a21b-4192-8081-8d5c4d2b4e15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc17056-65ca-41f3-8d9a-9fd33f14c680", "sighting_of_ref": "indicator--f3448b18-0ec9-42f1-ac1e-43a3106474bf", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71145e6d-dd80-4817-9586-e658cb224b3f", "sighting_of_ref": "indicator--c3f9693b-2a14-49f1-a68f-3974ba07f9f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf432a7c-ca86-43e0-aee0-2a6d48b00466", "sighting_of_ref": "indicator--8e1ec458-b294-4d1c-9c9d-5943157f5ddf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f06ea9a-5102-4ab2-abc8-c4eb5fb514b0", "sighting_of_ref": "indicator--a70dcaa4-0acf-4858-a444-8d2662af78a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62998fa-f678-44cb-99f7-c7b60bd09a32", "sighting_of_ref": "indicator--6732b674-74b3-4621-ac6a-7561bd996363", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda1fdee-d57e-4af1-bdf6-5075b06fc56f", "sighting_of_ref": "indicator--693f62df-2145-44a4-a1e3-e0a19463664e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241572ee-cd07-4348-83e0-8aae743192f5", "sighting_of_ref": "indicator--f5cc2df8-c70e-4ffe-900a-be01f128f912", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01992a5-e96e-46e7-b89f-a66f3fde4006", "sighting_of_ref": "indicator--6332d60b-790f-46f8-9633-cc5ebc20792c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108c04dc-3c25-4be5-80f7-cfa09e975e0f", "sighting_of_ref": "indicator--7f645cda-0b2b-4d2f-a71e-a8538a5cb79c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e8cfd-baed-4e24-b0e8-617034ea4f01", "sighting_of_ref": "indicator--864e8be6-e66f-4b63-be8c-74b804c3ada1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c551745-7e69-4992-921d-8aa5e4404e8f", "sighting_of_ref": "indicator--5a648369-b167-40e1-8f73-a33f6d82f1cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc283b25-cb8b-4659-98f2-dd2fb8c4d6e3", "sighting_of_ref": "indicator--4f69429a-0ef1-420f-bc1e-8ca92579e30c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86117442-908a-49b1-8b04-74e951db3b5f", "sighting_of_ref": "indicator--5ac2233a-b425-4429-b24f-e82fa835a316", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b487ddd-dd34-4a9f-ae12-c5862eb7cce6", "sighting_of_ref": "indicator--6b31c1b3-2640-4d77-8840-5be1111d1f95", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58aacf9a-935b-43fd-9a6b-2227b7cead14", "sighting_of_ref": "indicator--e5ed33eb-3895-4e3c-b157-330a81ba8ffe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b26141-7e50-4d69-b0e1-794d8a22a7cb", "sighting_of_ref": "indicator--1002a502-1c17-4948-8727-c4663b3d0898", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a626da-4d4f-4484-aa2a-e0a63026b034", "sighting_of_ref": "indicator--718fc9ff-a5f2-4ded-b357-53a9a60228c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36825ecc-0da3-4b3a-8873-3c6831da624f", "sighting_of_ref": "indicator--72e3e121-5172-480b-9469-f507062c426d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f31e51-3999-4b46-bd66-41e2018eb468", "sighting_of_ref": "indicator--6107855d-78c9-4a57-a135-8189f904e09b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604b512f-8dde-4f06-ab23-6bd1a061369b", "sighting_of_ref": "indicator--4b28c05e-4868-4914-a9e9-b22e2a7d5618", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6cc58d-d706-4868-ab9d-9deef1be44ff", "sighting_of_ref": "indicator--ac9f589c-6926-4753-9770-147f1c20caf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54029735-09f4-4608-94c4-e94c2564fc06", "sighting_of_ref": "indicator--382f4e92-715f-4f63-bf2f-c65f63a1f1f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2facf32-af1e-442f-a141-2839e67ad5f3", "sighting_of_ref": "indicator--4c0ae1bf-e866-4dd1-b70e-7ab5d6e7d2ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e14185e-0642-40cd-a55a-6aa2ee8c9069", "sighting_of_ref": "indicator--8bda6a9e-cab9-494c-90f0-900c4fd33d56", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace29b7-092f-4917-b2c1-8c9996c19254", "sighting_of_ref": "indicator--d956142b-fd47-40f5-a29f-39d1ffced7db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb561931-a7a2-4dbc-aab4-e8540613cc1c", "sighting_of_ref": "indicator--146d7c0b-f866-41eb-b386-46b58b30db60", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6355781-f5cc-4849-b4ac-49b71f425e37", "sighting_of_ref": "indicator--129c303b-fb1c-43dc-b109-e27cc5354f02", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590d78d2-42ca-4829-9f30-60b61aeea6ab", "sighting_of_ref": "indicator--da6e4a00-1c3f-4e30-862b-336362da9a39", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bf4524-a839-412b-9627-287981b298ef", "sighting_of_ref": "indicator--ce037074-64e3-4af9-b60d-d59598b00465", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4eeef7-75af-48e4-b63e-0514b486c7ed", "sighting_of_ref": "indicator--a95fe0c2-b4e2-4110-9d25-02182b0dd0a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e46641-6f5e-4a46-8ad6-b5d471c4e484", "sighting_of_ref": "indicator--96a014c8-5a57-433f-9b5e-c633f28cfb69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e481c232-c2b1-4bf8-b995-14c6c9f125fa", "sighting_of_ref": "indicator--b0ce2abc-1b67-4b57-b1a3-1e8a6322df5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac98ad8f-d149-4d2c-870c-ad055439b025", "sighting_of_ref": "indicator--c85c96ec-dbab-491e-9910-1d443ad79d7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da5d9a0-ab05-4474-bfec-6b49f95690ca", "sighting_of_ref": "indicator--46b71666-76e4-4110-9a6c-709f405fc051", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454bcd17-f00d-41d1-92e4-2339559faf9b", "sighting_of_ref": "indicator--99c2d652-0687-4f33-9810-5d882cce2aec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fbe88c-9a49-4c6b-9ceb-7da447020804", "sighting_of_ref": "indicator--1fdd7d9b-ce8a-45bf-a7a7-8e55ed97517b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c19caa-f99a-45df-bba6-c2407609c1b2", "sighting_of_ref": "indicator--8b3e7364-ba84-4b02-9f73-b37b7f5892ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1d2c45-4829-460a-8c33-ac4a82ac725d", "sighting_of_ref": "indicator--5305d896-1fff-405e-901d-6a28d650dfee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee98125-bd70-44f7-8f0f-7ca015ad82fc", "sighting_of_ref": "indicator--406ee60a-a5b6-4bd3-afdb-aed4e16f9ca8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e277fad-1aa5-4aa0-8215-b5232ff6aa82", "sighting_of_ref": "indicator--0f546edf-e8e8-4feb-becf-9afdfd42ae2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224ce83e-8b71-45f8-a8cc-2356a90ceb10", "sighting_of_ref": "indicator--04219c6a-7420-4056-924c-1f8e3ca22a80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f8c125-a3b4-4188-9894-b35f7dc17ae8", "sighting_of_ref": "indicator--4a712e07-2ebe-4624-9dc9-aef77cf3df1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a660e6-7c1c-443a-b6de-22e377d70f6e", "sighting_of_ref": "indicator--7f8b556a-2e95-47af-b4e2-635d7a80e39f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dcd131-1cb1-44e4-8282-074685712091", "sighting_of_ref": "indicator--a3629713-7a08-42e0-810d-460e289e6a99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9933bce9-ab6c-4450-821c-7a741ccf6a2e", "sighting_of_ref": "indicator--ad551fbe-0a80-4e09-926c-e6bfd313c1c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e272bc-8322-4923-8f11-88337fc10279", "sighting_of_ref": "indicator--9caa0193-9b6b-4c4f-a2cf-48ad96d010f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c45223-5823-4f71-885c-bf3ff9f117a4", "sighting_of_ref": "indicator--edf2054d-baff-4d22-93ef-3391bbd3d089", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0478b3-9f16-4f52-8373-68523b0879c4", "sighting_of_ref": "indicator--0356fa46-575a-4328-8881-a846cfa0debd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2052252f-97a4-4d3b-87a5-0a1da0733d81", "sighting_of_ref": "indicator--97859c59-8eb8-4ebe-bd88-58225062c2aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94067e6b-8a24-4c8f-a6f6-87a102b92687", "sighting_of_ref": "indicator--04071948-6cde-4ee2-8b9c-6a4ab22309b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2e0ffe-dfd1-47ad-a745-d5cfd9b80e95", "sighting_of_ref": "indicator--e62d57b8-09e5-478a-a83a-8ade003ebc9d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0d7600-dfbe-4679-8917-ac2bcef32229", "sighting_of_ref": "indicator--727dc4de-1578-4463-965e-b1a2060f5b4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdfc033-ad02-4198-af75-1c9ddf2014d9", "sighting_of_ref": "indicator--5e8a9b99-ffa9-44a6-bca6-cc867b5b4eb3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f986675-2a1d-4098-bc69-4dd471de9f5b", "sighting_of_ref": "indicator--98f1b512-b171-474c-bbe2-3156ce995c80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61a6a97-317f-45ce-af97-5c4237b788bc", "sighting_of_ref": "indicator--7e25583e-c345-40d5-a503-f71c84d86bb5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc81714-65d1-484e-a718-79d1ef6a9daf", "sighting_of_ref": "indicator--7c20416f-0ec7-47ed-8a0b-c82d2edc2cc5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f172541-5216-4712-ad64-f80bdd09f2ed", "sighting_of_ref": "indicator--c45cdbd7-7af3-4a9f-9c49-01f071b71828", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a39110d-2140-4f00-87e0-f5b7656ee633", "sighting_of_ref": "indicator--062d28de-3c32-4d07-b4a9-4b8bbd6ed3f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb168bd-3a60-41e5-a5a9-993d2e704676", "sighting_of_ref": "indicator--8fd26610-31ca-433a-b85e-115b78ff151c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7b23d6-a3b9-4526-8e03-c04077b01b66", "sighting_of_ref": "indicator--83868503-65fe-4a5c-881c-0c5485f2562c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f151cce7-d092-4f62-be17-aa38cf422661", "sighting_of_ref": "indicator--2dd216fa-d6bf-4a19-94a8-e020d9bded8d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f956b06-e271-4a0c-ad96-af08673023b7", "sighting_of_ref": "indicator--307b8430-236e-460f-94de-61a5342293a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9232be00-525e-4f5a-83fc-864386f33fa7", "sighting_of_ref": "indicator--b4e92e20-1455-4afe-bf9e-61c5aff2b638", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5857b42d-1053-4cb3-9075-727d352b229f", "sighting_of_ref": "indicator--174193a7-434f-4166-97d6-d936ece57edc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436b0aed-2005-4522-aafb-7eda8e563853", "sighting_of_ref": "indicator--fb5ac9a2-96d8-4795-afe6-6974dd14201f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ba1e5-ab60-4043-8510-499e3bb98778", "sighting_of_ref": "indicator--bedbe3be-3c9e-4b5d-b512-4d67e16c2953", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563eeb1a-1e2a-4a3b-95a3-573a54f07c19", "sighting_of_ref": "indicator--515575f2-0de1-434d-a8ef-02d0db6da4fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aba7158-cc30-4048-b231-f2995c341f37", "sighting_of_ref": "indicator--f93f6cd9-885c-40c4-bd4b-b92bb6ed7705", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdceb4ba-2f16-4743-a71d-88c816e297a9", "sighting_of_ref": "indicator--4314d334-0995-4d97-94dc-098388c9a87e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12588283-4225-4ad4-b4c0-e8faad9f98f0", "sighting_of_ref": "indicator--d7f0269e-7665-4ff9-a9e4-841167fbce2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d126ebc7-fe98-4242-acf1-4085ccfe98bf", "sighting_of_ref": "indicator--f1dca196-54f9-4ba7-83b2-1cd43a72e8a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de621b4-6a3a-409d-8b0e-764148e8fd78", "sighting_of_ref": "indicator--42b2f25e-fe0e-44b9-a919-e3b3f25e0f05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e8f34d-d67a-4c41-a1d9-3a2441fa0038", "sighting_of_ref": "indicator--61766e2a-176a-444d-bff8-77d02f9bd696", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9091a8ac-5bda-4792-9015-aa19f2a9b2be", "sighting_of_ref": "indicator--f20631cb-e171-40e6-af7c-ba59b425d1a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1650cdd5-1d43-4782-ab2d-f006e2021b2b", "sighting_of_ref": "indicator--2ba13195-80fb-46ff-beee-713f0cbac2f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a0373-9ef2-464f-9fbb-8251f3e3bd4d", "sighting_of_ref": "indicator--4250baec-245e-4ecb-b0d3-9ebc81599f87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2765e39-44ed-41d9-b11c-83b333e16192", "sighting_of_ref": "indicator--d187a414-1237-4839-ab24-a3185a1d87fe", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e64baa-75b0-4241-b739-bf107a2e1fda", "sighting_of_ref": "indicator--d187a414-1237-4839-ab24-a3185a1d87fe", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac5c4d5-631e-46e7-9ea2-6b7669224c12", "sighting_of_ref": "indicator--d19fe3b5-7cc4-404b-9cee-f425f996e781", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d27723-e6a7-45e0-8818-1c078cfaec76", "sighting_of_ref": "indicator--629f6c7b-ea7c-482a-840e-f4f3ca53df71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26e9224-b380-4876-b445-ff2dec9fbe3d", "sighting_of_ref": "indicator--7fa4191d-1457-47e5-aeae-2b2ff605d784", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff77a75-638e-4aba-864a-daae86700bfb", "sighting_of_ref": "indicator--928a438f-9911-4c1f-80e1-3cf72feabb31", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307d28f5-923a-4193-8e3d-a29bc41edba4", "sighting_of_ref": "indicator--265d37a4-f8e2-4d91-847b-2575953a84d7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77380539-ccb1-4f11-8261-956d94252945", "sighting_of_ref": "indicator--265d37a4-f8e2-4d91-847b-2575953a84d7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de347cb-2953-4753-a093-8d9b9fcad5bb", "sighting_of_ref": "indicator--c0e92136-cc05-43db-8b43-49d0d553af1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e693fc-6d61-47e0-acce-33b4f24d01cd", "sighting_of_ref": "indicator--1fbdb6d5-7ece-4e3d-bbb6-5b81ed7fe934", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1bc46b-7ab3-4ced-80f9-453a529db197", "sighting_of_ref": "indicator--77fde0d3-d835-459c-9f47-f3d05ae56c62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58412e39-e4d1-4a97-84bc-3a8c28e59bd5", "sighting_of_ref": "indicator--ca6e65bc-7618-431f-83f5-a1b6e201b5b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14af0fc1-9819-42fb-ae49-f817b04d59e7", "sighting_of_ref": "indicator--7b313b0b-e6bb-4f6f-9ac9-544c439c17c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5413a8f5-a5e9-41ba-b20d-ec46ff8837e2", "sighting_of_ref": "indicator--4eb271f9-5a4c-4f4e-b9a5-045c9eae6d15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58adb2d1-1414-456c-bdc0-866afbc47ea9", "sighting_of_ref": "indicator--8bdea92a-71c0-4e4d-bffa-3f2c9884dc6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc692d-e24e-4d1a-8cbb-91a7bc2f6916", "sighting_of_ref": "indicator--08bda1e5-1caf-466b-9729-7b4939cc065e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04457adb-250c-44ab-a45e-6a0873c608d0", "sighting_of_ref": "indicator--3ead4b3f-a3f9-43b2-8295-6fbd00dc9a74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a756b52-3e9d-48fd-9bea-668d21c63847", "sighting_of_ref": "indicator--330744c3-1ade-4d8a-b76a-7a7b88d94b34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8363a72-bba5-4a18-83fe-c4970172665a", "sighting_of_ref": "indicator--cb2b4dde-bc70-4840-b207-d00eac3cc7a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b2a958-dc86-40a9-baf0-30480a808316", "sighting_of_ref": "indicator--ff4c3f76-2f0d-44f3-a6d2-d70a4230954f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2740b7fe-9460-4f8c-a53a-b6b2e436dfcb", "sighting_of_ref": "indicator--79c5b564-cf25-450b-a8b6-51920fce49c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40273740-af01-4ccc-a0a8-2b3507c0c954", "sighting_of_ref": "indicator--ec76d35c-591c-486e-813c-fb5b4e4aba61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc84ce6-c761-499e-ba3e-663686cd6c0c", "sighting_of_ref": "indicator--98588959-7674-4f48-b8b7-0a278b02e52d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825a3de7-20c0-442f-9e63-a449f553048f", "sighting_of_ref": "indicator--b1183d49-4e80-4fe2-9000-30dcd88eb18a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a7adcc-6fd0-40eb-ad4b-eced2e233b96", "sighting_of_ref": "indicator--35a3270d-abab-4c7a-8378-7073654b7706", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025fc0ca-bfeb-47b7-8c78-657bb690d166", "sighting_of_ref": "indicator--42f25020-54a2-4f87-8f59-39f12f580a8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8915f0c-0ca4-45d9-a478-9f83f22f3493", "sighting_of_ref": "indicator--fdc61b6e-936e-405d-8686-b2a323af9472", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d28c61-3334-4a18-b4d2-b5e5d2511551", "sighting_of_ref": "indicator--b23a44eb-4e67-4946-8632-d9369b7dc025", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04827328-7016-4e9e-8e7a-9ebc9ab3ed2b", "sighting_of_ref": "indicator--0adfc8ce-0f4f-4c24-8439-e50fc8c76eb0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fffcbaf-ea17-45d2-92ac-b92778b4d43e", "sighting_of_ref": "indicator--8cb8875f-dc5b-40f3-84d1-5a72de2592a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a300fec-a9a7-4809-82e8-cb95e908df91", "sighting_of_ref": "indicator--cb1e736a-04c8-40be-b32d-f77e8e67d478", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31428941-883a-4ba1-851c-5ae8a03f8f88", "sighting_of_ref": "indicator--3ad3ad93-e48f-4bd3-aba9-ea1f53c4906d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b811bd-22a1-42e2-b51e-44fa122e8486", "sighting_of_ref": "indicator--b753b622-f663-4d41-b41b-d591f8aecac4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460f677a-5159-4a27-adcf-db4403f0ae6a", "sighting_of_ref": "indicator--a1bc263c-eca0-4db1-8f02-9f6e84823272", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cbf63f-e280-48f8-bc0a-cf8525073067", "sighting_of_ref": "indicator--1c4a177a-5b43-495d-8bad-a7de7d78a2fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1a7835-c7ab-4d6c-ac0e-ebcb9bfba92b", "sighting_of_ref": "indicator--5b1d2343-fd8f-48fb-ac4e-d79ce7e39fcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01275512-23a5-43ba-a367-91ccb7265ad1", "sighting_of_ref": "indicator--0bf75f2e-2853-4e53-9458-ac82d81779c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22351785-8d4b-4f3d-97ac-705e86db4bcd", "sighting_of_ref": "indicator--c447b3af-727e-4881-b5d4-0894b94bbcca", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a9bc2c-b990-4cf3-a2f8-967f9664498e", "sighting_of_ref": "indicator--95f29b50-ce7a-44ea-9754-b508aa2ebccc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c01007d-6f9d-45a8-95a7-69df831bfe42", "sighting_of_ref": "indicator--a395b623-982c-467b-8035-c9aebc4398da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909a582d-d7b1-45fe-80cc-243f0f8ed40a", "sighting_of_ref": "indicator--911e2e76-5a42-40f1-a214-965031fda166", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612a57bb-79c7-4f38-8eea-98a43038630f", "sighting_of_ref": "indicator--bc6fe9f2-f56a-4fc8-b9fc-331fb47261db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f85b058-6967-4e91-b1b9-9f464c939b76", "sighting_of_ref": "indicator--1db425d9-2b06-4450-9711-e5818be17a66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03282775-a132-4edc-8480-9b4095aae495", "sighting_of_ref": "indicator--b9b72b2e-d74d-4af8-9467-f6545313fed7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cada10ce-0540-4ad2-b1a4-994fa55a05b8", "sighting_of_ref": "indicator--9f7f00db-0f4c-4d48-abc4-12601ac45e21", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a755b7-a11a-4bd3-ada7-820596ffce5b", "sighting_of_ref": "indicator--ccf534c2-2673-480a-b0f8-2b2179e94cb4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d667b54a-c27d-405c-bc72-b8c65ab7b5e1", "sighting_of_ref": "indicator--882a69cb-1b7b-4af1-bbda-68370ef59f54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a3a1d-f803-48b1-8e54-a3c9cd80088e", "sighting_of_ref": "indicator--50450554-8fe5-440a-a0e6-e50ce124decb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78a3849-1365-4b12-9da1-3581c35db9b8", "sighting_of_ref": "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6b026b-fbfa-471d-95c5-ebfafa671ae4", "sighting_of_ref": "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc90ed70-f073-4b3b-b9ce-67cd0812c6bf", "sighting_of_ref": "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6cec21-2900-459d-9849-48095e8f0a67", "sighting_of_ref": "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c4d13-7a0b-4b71-aa59-be4c49065020", "sighting_of_ref": "indicator--5b50d355-6d6b-48ec-a009-7cc0a3d3f463", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7a4d9d-5c33-44dc-850b-3f7ff6e8dfec", "sighting_of_ref": "indicator--6573953e-777e-4521-ad33-6fbd2bdd6dad", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10c574a-3017-45d2-b3d6-0ebe8f72ef95", "sighting_of_ref": "indicator--6573953e-777e-4521-ad33-6fbd2bdd6dad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13216ee0-2ad7-4b29-9225-2a737075cbd7", "sighting_of_ref": "indicator--e7784a0c-0dd0-4674-bc54-33992e6da705", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b6c46-3143-4b83-9da8-e39c8b9d0533", "sighting_of_ref": "indicator--fa41b60d-ec7f-421f-bb70-748f6feef855", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aece1af6-bb64-4f8e-9c67-17bb0dfccd30", "sighting_of_ref": "indicator--0c59f86e-a2ac-463c-a2a8-938040129fe0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddafd51-469a-4db1-8ae1-9af1a5721ae3", "sighting_of_ref": "indicator--6fa2df16-5268-4590-aeb6-632eadb74408", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3b7b1f-8f43-4fbb-836e-36b7c45a2041", "sighting_of_ref": "indicator--7108dee0-3035-4fbd-b4b0-70a674dc2cb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f76c9f2-0c48-49a3-bb32-93383ebf7867", "sighting_of_ref": "indicator--ce94aec8-7aeb-48c5-a51b-f22f8bbfffa6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59a2aba-9b20-4082-ab5f-b7daefc0c1a2", "sighting_of_ref": "indicator--d69f0dcc-5cd8-49c4-8d19-8deab8224044", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224d387-f8b3-4f1a-8197-5984bb93b15c", "sighting_of_ref": "indicator--59c08da7-3c13-4496-afa8-9caac9a9fdc4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a902f5-3175-4bd8-8d95-4feb43dd979a", "sighting_of_ref": "indicator--1422309a-3849-47e5-af96-4b4755af0b53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cadf6d-0714-4b34-94b8-09b28fc4c8b6", "sighting_of_ref": "indicator--4adec817-6a48-4c64-9736-a99f790904f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f8a290-2e62-41e6-9492-a1e89f646925", "sighting_of_ref": "indicator--384cbd13-f172-46ca-9e4a-33dea3a26159", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91c14ee-07c2-4676-9bcb-8c1b91e5e15f", "sighting_of_ref": "indicator--362a64d0-1bd4-4a68-9464-c64ab1da6635", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7677734a-6fd9-4e59-8353-d52ec7d9da7f", "sighting_of_ref": "indicator--8f94b206-59b3-4cdb-9ece-f6cd3758a470", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba5db0c-4c46-41d3-a916-b16e3363e787", "sighting_of_ref": "indicator--76e7f24f-863e-46db-8818-bb4972287cc1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65697eb-6fa5-4306-912c-5b0ed6d6f333", "sighting_of_ref": "indicator--ae3acb49-cba6-4640-b5d2-076916d236ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acaede5-644f-4ac6-9595-4cee6a53133d", "sighting_of_ref": "indicator--9811282b-2d3c-4427-af5b-a17b33d23966", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c89bcbe-6699-412f-8456-47b156327f2c", "sighting_of_ref": "indicator--45fefe18-a72c-4149-a0c5-990619effa88", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca018469-83d3-4bea-80b7-619fa7f74048", "sighting_of_ref": "indicator--c9c364c3-1951-4967-93cd-7dc0cc346a06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4465d8-d0d0-4495-802c-e14e15923e34", "sighting_of_ref": "indicator--14660dd0-5790-4ad8-9714-246116f331ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1608178f-b57f-4a67-994f-2ca54db48ce0", "sighting_of_ref": "indicator--5d77b37e-84f9-482b-ba62-9fa0d902ef84", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b819705-e612-4e8f-bf49-b80e93d66461", "sighting_of_ref": "indicator--dcb2ca62-0cde-47de-87de-210b4e1ec431", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eeff71-87bc-4885-bd3b-620aef613ed0", "sighting_of_ref": "indicator--9f504be5-86aa-4b87-8b35-ae498e01888b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563dec11-8228-4bcc-b749-145edbcb227f", "sighting_of_ref": "indicator--8f2cd7e6-821b-4e03-bca5-4a2bf30120ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8843a008-55e3-40ee-9c7b-a0290331ef60", "sighting_of_ref": "indicator--73f777e2-cb58-4f04-baa9-5f2a39a502f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc2539-8c04-4d30-95f9-e20557b32f47", "sighting_of_ref": "indicator--4223e8b0-e42b-4fdd-90bf-6c661deee38f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41654ee-4f38-4588-ab93-ea2b31e37d57", "sighting_of_ref": "indicator--b3f60901-4074-41c3-9d69-c891835d201b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf80ddd-c1ba-485e-bef0-8686d769800f", "sighting_of_ref": "indicator--5392c4fa-cd7c-46a2-8e1a-d2c2ec673ea7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0c8d6d-84f6-4563-bc20-63495679c50d", "sighting_of_ref": "indicator--29099abf-6ed3-45b8-bae6-7b5c4240013b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0854d-9457-464b-9c2c-e27162a4395c", "sighting_of_ref": "indicator--f13947d2-1f8e-44c1-bcdd-0ecba26f4966", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256b8603-beaf-4ac1-a2c3-c1e30db6192c", "sighting_of_ref": "indicator--313983bb-b4cb-43db-98e4-9c6d0c6eb191", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f379a2d1-ffeb-49e8-8bf5-1894dd7bbaa4", "sighting_of_ref": "indicator--3e3ebc7e-ca5b-4fb0-b835-e98253cd2ba5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c18d747-9034-41b0-8a7a-51f2e204c5ff", "sighting_of_ref": "indicator--b57a3841-d3a6-44c3-8961-d593f6c30fca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f66c9b2-60f0-40db-8aa1-78f7b13c9393", "sighting_of_ref": "indicator--004bdcca-082b-4745-824c-75bcbc514f4d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fafb76c-0aed-4088-97c4-7694939a74b7", "sighting_of_ref": "indicator--df1563a3-0ea9-4c4c-a999-67950ff3481d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90328bbe-2e0d-41a0-b9fc-e5c9dd23b838", "sighting_of_ref": "indicator--2fed67b3-6fd2-45c8-9385-bf72deb0aea9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde53d71-cf8b-46a2-8257-aef1e3016b58", "sighting_of_ref": "indicator--edcdb98d-7722-47d8-b484-38a73e3cd3cd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fb0df9-b82c-4f2e-be17-5cbb7e1e11f8", "sighting_of_ref": "indicator--cab2f665-c5a2-4014-a0bb-977e3e2515a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175eedf8-58f3-4882-8502-47986872c2a0", "sighting_of_ref": "indicator--772f27ac-83af-4658-8331-3a8232fa8e54", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6d7c56-2dc8-414a-b19f-b609609b909d", "sighting_of_ref": "indicator--8d451052-0e5d-49ba-8a60-ec911a85a054", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d25ae8-10a7-4f79-b9b2-1583a1a89be0", "sighting_of_ref": "indicator--871ffe9f-c4bb-4534-8f7c-5fddf17d23c9", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad83740-eb7d-4355-a635-2a94b96f7ffa", "sighting_of_ref": "indicator--8b8417dd-40a5-4fb6-a447-dd536bd9a913", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc4e245-3d9c-44b1-9c2a-86ddc3a6346a", "sighting_of_ref": "indicator--9da38c3a-0508-4ded-a877-1cc2849f1dd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db12e0bc-1b58-4c83-a211-8585fa1aa363", "sighting_of_ref": "indicator--42611b15-e6ca-4b13-b419-676da13e04a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f745073-e0b5-4f2b-bf91-e4ed988ddd9d", "sighting_of_ref": "indicator--72092c0b-fa7c-41f5-91c0-7b1e61747ba5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aaac9a-0baf-4841-bcaa-b1d511a888cc", "sighting_of_ref": "indicator--ca78eedf-eb67-450b-91f6-9233d9f693c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46784cf1-d9fe-46ac-bc87-db519f9b4748", "sighting_of_ref": "indicator--6e0b5109-096a-40c6-a6b3-d0e5ef7f47cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6b9c35-080c-469f-a7ab-b53dc6fad3c5", "sighting_of_ref": "indicator--a1c10ecf-dede-455d-af41-d82794bdd642", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00ae8d4-3c38-479f-9d53-2ef530929b25", "sighting_of_ref": "indicator--24cc514c-e613-43e8-9cc2-d8261d184b29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cbb9b4-461e-4540-b55b-a5c3c738842f", "sighting_of_ref": "indicator--0e03e218-ddc5-4ef0-9cf5-306385b7fc23", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9dbc681-c0d8-46ae-989a-05c72f0d24d5", "sighting_of_ref": "indicator--2fb804c3-da2f-4857-99fe-b6d8490cfeed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65a25c8-8be2-492a-8718-4e5a31b50b74", "sighting_of_ref": "indicator--7595b0d1-fd3f-468d-8e49-9f3327abf641", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b576f2d3-7bb9-4aa8-8fbe-9716122925db", "sighting_of_ref": "indicator--f6cb5ac2-3fee-4e78-afce-eb1bf5d3e364", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28d305f-ead3-4a19-b3b6-ccbe24c07e92", "sighting_of_ref": "indicator--b72dc6c2-7c7c-40cc-a8b0-c7a4f9ee42e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a91aeab-2b04-43d2-9291-339059a39021", "sighting_of_ref": "indicator--9741fa65-4f84-4567-b1dd-91536738e4be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002052dd-7ad1-42e4-bc73-277b66d8e5e6", "sighting_of_ref": "indicator--4ed352e0-a994-4391-adb9-b31f80bd2e79", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b17252-19e1-4c8a-9f78-796a4344f715", "sighting_of_ref": "indicator--9d2f4abc-46be-4e84-a56e-48e1abedd7fe", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e903af76-46e8-42fc-b933-ab63c388b207", "sighting_of_ref": "indicator--9d2f4abc-46be-4e84-a56e-48e1abedd7fe", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98701a3e-6237-47fd-abbf-9c71477c26b4", "sighting_of_ref": "indicator--d4a4880c-4102-430b-904b-d30b8d4461b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5116bbac-d83a-48a1-8289-d8ef06df2df7", "sighting_of_ref": "indicator--27e04e54-f01c-4150-96cb-a352b9c84d36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0415ff7-b170-48e3-864f-0fc727f4a539", "sighting_of_ref": "indicator--7d3a4277-1e1e-450e-9e43-c7bb62d9b647", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717ad6ec-e496-440d-9526-b99beae4858f", "sighting_of_ref": "indicator--2139559e-ebc2-482b-94d3-a2240f9e357e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7fce02-d442-4833-912d-d9fddf596eb4", "sighting_of_ref": "indicator--0d32d41e-dbb8-4de4-b55f-29e92bf47128", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d389748f-f30a-46bd-9e1c-0a5bb594b06a", "sighting_of_ref": "indicator--2b15de0c-7d86-4f6d-85b2-f093e827f907", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ed0335-fd96-45d6-a40c-7fa05a441dbe", "sighting_of_ref": "indicator--88c2dcd7-d777-40c1-8f4f-540857dd071a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be31dc2-2891-4af8-badc-839f7355c9ce", "sighting_of_ref": "indicator--98d753a8-6ff7-4291-924b-6e7532655735", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1047a420-b4d1-4ea1-87f4-e8a57ce2c96f", "sighting_of_ref": "indicator--4fe7c99e-3f92-4d26-a2d4-92628a5ad5e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a698b91-c289-44a1-a088-6a1e358a154d", "sighting_of_ref": "indicator--68fef9c4-f53a-422a-b165-497878dbaa6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b27e30b-d2f5-4c9f-a240-6e7bacbcccc8", "sighting_of_ref": "indicator--6071067e-162c-44fe-9d15-a46838b227a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dca7c9-c741-4de9-8d00-0dd3a8db92ed", "sighting_of_ref": "indicator--194cbf22-cae9-4138-853e-bca2004d76a2", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c20cdc7-8198-43b7-b386-89305f9da903", "sighting_of_ref": "indicator--1976b809-daff-44d9-95e9-76393eae172b", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16edbdf2-b9c4-429b-91c3-50b333a23a23", "sighting_of_ref": "indicator--4bfbc248-4314-40d2-8ea3-d7771ac4360c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd5da55-7032-4eee-aa92-92139f2b5f21", "sighting_of_ref": "indicator--abd509c2-ece4-466d-904a-290478eb5399", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d04a92c-c1d9-4f0f-a878-3138872e4347", "sighting_of_ref": "indicator--2f1b3b04-71d0-444c-97a5-5b351b87f4e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe910348-67cb-4a29-9569-01788bf67102", "sighting_of_ref": "indicator--42f12840-2a96-4afe-a82d-da3fb10cc632", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d56e3-7528-49ce-a166-e7647533f3d4", "sighting_of_ref": "indicator--6eb533f2-a18b-4318-9d26-09edb2b15c96", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cea538f-34dc-46c3-add7-c1b32807ab2e", "sighting_of_ref": "indicator--38a93d13-a886-454b-91fc-0a08384133ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2c1d28-2769-4377-bcb9-9e659ae76018", "sighting_of_ref": "indicator--3b9dfa66-5f8f-4f4d-bb27-9cfafa147267", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a24d23-d23f-4401-8bb4-4c3fece01aa1", "sighting_of_ref": "indicator--dd5a5cd3-4f5d-4c1d-885c-6652c72fe9b0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1f7274-6ea8-4fe5-9b16-2e2d5452806f", "sighting_of_ref": "indicator--e687af89-5286-4c8b-bca2-fb150b6756c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1936005-7e9f-4772-820c-4c8d8031f339", "sighting_of_ref": "indicator--2678d4ec-ed64-4b79-a7a3-7b35b5531be1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7abd0d2-3bf1-4017-9dfa-e4a79d5528e1", "sighting_of_ref": "indicator--8e2f76ce-9e28-41c2-8596-b76ea5e78185", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a68c2d3-de53-40db-99b2-36d8b997cdeb", "sighting_of_ref": "indicator--44aa927b-1a56-4e84-adac-6d58ad92a568", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781161a-fd97-4ba5-bf1c-edce6f6694f7", "sighting_of_ref": "indicator--1a6ab18a-0711-487f-ba69-1f25fd6052bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a948f8-aa2d-4df2-b39d-5896e818109d", "sighting_of_ref": "indicator--35e1b1b9-e1a7-491b-a418-66d90efdfa32", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb65de7-15d5-4442-a39a-b2863fbef9fe", "sighting_of_ref": "indicator--93107e09-4836-461a-ae59-eb68cd552a38", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2818550a-c250-45ad-ade4-448d8456506b", "sighting_of_ref": "indicator--5b738790-9ae3-474a-b241-2abf9a026d06", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cd0a93-591f-4006-9449-8cd49f96f0c7", "sighting_of_ref": "indicator--8400b0cd-f232-4f81-9147-1b852a7b0843", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b97537-84ad-4905-bc86-74b479e3da07", "sighting_of_ref": "indicator--68c9ee1a-5735-4903-84eb-5dafad06e258", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa0be26-e2b4-4d74-b0c3-6d4e78801342", "sighting_of_ref": "indicator--1b35ca4e-57ad-4f38-b569-88f19becaf40", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73f44bc-2123-4524-b4a5-bb6e39f9fc56", "sighting_of_ref": "indicator--f0dc0426-2ff8-42d5-b2be-92b80c79347d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5800ea32-c7f0-4d31-8555-822fc4f32916", "sighting_of_ref": "indicator--970044e4-529e-4139-825f-cc9081841c22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac68e667-6b8f-4015-b68a-8ed067c1a7cf", "sighting_of_ref": "indicator--030bc1c8-1e45-4d32-89da-a051e8649201", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3ab0f0-a7b4-423a-a2c8-2fb56677b926", "sighting_of_ref": "indicator--8aaecb01-0ea1-408f-b200-54ffe42f813d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22560882-e564-4b02-b4d2-86f73d0ac6df", "sighting_of_ref": "indicator--623cfb31-e3e3-4c51-a880-cb6fd37cdc6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df132f17-e09c-4914-be26-ff49ec682b6e", "sighting_of_ref": "indicator--8678e019-94fa-4644-82ee-e6c6196e2876", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d701d0-e579-43d3-b84a-9bcaaca693f0", "sighting_of_ref": "indicator--cf26bd39-4937-4f71-b29e-872922c76f68", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dc47d5-ce1d-4e89-876b-cef3fbaaab33", "sighting_of_ref": "indicator--95364bbf-1bde-486c-9290-a08f96e1b9da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6ee046-d428-49d4-b130-3e34cb27de38", "sighting_of_ref": "indicator--889c1040-d07e-4e2f-9ab0-9642a5c24b91", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64bdc8a-a324-40c9-b448-861919ead4f4", "sighting_of_ref": "indicator--d7b65f1b-7077-4860-ab30-53c5cf3f7f8d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6968ec82-4b8d-425d-aca6-3f868a0bc995", "sighting_of_ref": "indicator--9eaf62dc-2739-4eb2-b1c1-1e789fd0cefa", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0df0b0-9f71-4e8a-b876-80eab6f623d7", "sighting_of_ref": "indicator--5fb4f704-ba9f-453d-9043-e8f3f1fba036", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c2e077-46ce-4b48-8fa7-218832fd042f", "sighting_of_ref": "indicator--8e204c8b-67c8-49cf-adae-b624373e7d8a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4e74dc-d8f4-4995-a22c-5fb09e181bdc", "sighting_of_ref": "indicator--5f2b9fa7-9b4a-49f3-b9e6-d7ec87d471c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a039bb-102d-4d95-a1de-e0e5fa179a30", "sighting_of_ref": "indicator--815fee8e-1f53-4bde-bdff-6417643cd668", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a47f52-6d88-467b-9846-a826040fff0b", "sighting_of_ref": "indicator--393a80cc-e7ce-4e12-bcb3-d8f9bc7c2f75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ebd2fb-9fbf-40ad-99cb-b5e0ab979372", "sighting_of_ref": "indicator--6526e32b-6c54-4fa7-bbe1-79a9cc608383", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111aaed2-9346-43ba-a3ff-cbdd2e2bebeb", "sighting_of_ref": "indicator--c9cbb4ed-9634-406f-bcf6-34fc1e1f68e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b24b1d0-73f1-47d7-bddb-448423c9a5e1", "sighting_of_ref": "indicator--b618ec3c-869d-4200-9331-69662bb3808a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b06b15-dae2-47c9-9f64-1d634b414c36", "sighting_of_ref": "indicator--dc6d5178-7828-4b2f-a372-3c91888f4b88", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a81631-a7db-4362-890e-d3cb5e8a83ef", "sighting_of_ref": "indicator--c2df7142-4d7a-48d6-9f6e-413fa670c567", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2376e9-7fab-4a59-a367-302c10d6e715", "sighting_of_ref": "indicator--a42470c6-0ca6-4e56-af0a-8a6463e6f760", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76da2cbe-8d12-4540-9786-dbc3cb2d2582", "sighting_of_ref": "indicator--aae4c343-5c1f-4a7f-9b0e-51684960c183", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277aaef9-0d99-4d1d-ab3e-6a1c4019b2ff", "sighting_of_ref": "indicator--b7799d29-72fc-4348-b400-9a9c3a073978", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cbf1ff-3a53-4809-83c4-3d13f03fe0a3", "sighting_of_ref": "indicator--4d1ef0d2-1cde-45f0-85e7-143f51886d64", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b053df-ed80-4e96-a038-a80cdaf12ced", "sighting_of_ref": "indicator--e032ac98-f739-4f06-a581-5303b09170b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b02bbf-7b79-400f-987e-cc6a231394da", "sighting_of_ref": "indicator--7c31d03d-a652-4367-b852-8c1a9d62fce7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adea8023-51a1-47fe-8efd-09627ae55880", "sighting_of_ref": "indicator--2be9bab0-5188-4414-a766-3c562ddb2d1d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee86b7dd-ccdf-405c-85fd-d121efa9afe2", "sighting_of_ref": "indicator--edcffa15-dd5c-443d-8089-d59b4cd83e1d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090fddb4-9899-4722-8344-e2620642492c", "sighting_of_ref": "indicator--eb71e1b1-db2b-4533-9e50-4ecafca48b43", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aa0956-bcfa-4577-bdde-fbb51d986c4b", "sighting_of_ref": "indicator--c9da8b76-2fca-4724-be45-a9ef7f5fd9da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4117e27d-42ce-4c6d-98a5-8cd3894126a5", "sighting_of_ref": "indicator--b3506035-5253-4bb6-b6da-edca796dbdc9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2e1de4-a8c2-4be7-b3eb-2456bcdfd08a", "sighting_of_ref": "indicator--397a9b2a-f0e0-4f90-a480-dc837fc6510e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad37b2fe-40aa-4f73-8ef7-c5e3ecbac664", "sighting_of_ref": "indicator--9218c9c8-106d-4dbc-8083-546e692101ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18c16ce-7e9c-4eb9-903a-de04024cf221", "sighting_of_ref": "indicator--b86c8387-a8ff-4ab6-bd8e-75c76f5f625d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb74328-d1d9-4785-bb3a-d81ea45b246c", "sighting_of_ref": "indicator--ba6930e0-4dcf-4cf3-a903-0f53b7bb7cd1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bbc3f6-1f8c-46a3-9761-b988913c09c8", "sighting_of_ref": "indicator--6a2e5052-3e97-4536-a996-556afb1d1abb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ec56f5-1983-4f82-aab1-9551d31d8e0d", "sighting_of_ref": "indicator--1680376e-0da2-4b93-a778-471dc80241fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d77a2a4-f1be-411a-b389-6f205b4d0a62", "sighting_of_ref": "indicator--0ca25e34-d653-4558-bcb2-b52bcf6099c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9ecede-1483-42a0-ada5-cce0fb3d9cab", "sighting_of_ref": "indicator--818bc73d-4431-4f69-a405-c7d36d12b48a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0fcf0d-ff05-4fad-b6cc-0d4a7e6e0a52", "sighting_of_ref": "indicator--57795ca3-6c0d-477d-a3f9-09f360ddec87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873d9267-2245-4864-86f9-e7897ff89db1", "sighting_of_ref": "indicator--7d1681ab-3956-45c1-bca4-95f8487613bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090218e6-9040-4472-8d16-8707ebff31c4", "sighting_of_ref": "indicator--d2d59628-760c-4aa4-a034-e433f19fcd5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2db50c5-87db-4385-90f9-7bacb8f2a27e", "sighting_of_ref": "indicator--b5752ee2-29e8-4faa-b988-974848a143c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e324a691-c708-4b9a-94ec-f91544a9812f", "sighting_of_ref": "indicator--7047caa1-d6a1-42ab-852e-f1b508381045", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e920b61c-5730-4883-b47f-8c5a537b332f", "sighting_of_ref": "indicator--91fb23f5-7212-4b77-8e49-a759d6cd149d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1762941c-9b72-4b50-96b3-03f16e94055b", "sighting_of_ref": "indicator--49b68161-36d6-4161-b900-9f45a6c65243", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e3995-5681-43eb-a9ad-37e37192d0b0", "sighting_of_ref": "indicator--2e72445b-520b-42c8-97b5-e5dd2130b851", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f05852-0168-4a43-9bf4-d66f8e69efe8", "sighting_of_ref": "indicator--85cffa4e-7747-4aac-a619-15f9869bb79a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f661254-b941-43c8-b1b0-9c13a6f2dfb2", "sighting_of_ref": "indicator--9a7a8a34-63ba-474b-97e4-0b1321115307", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc6c229-1c09-4f9e-8436-785b5b129159", "sighting_of_ref": "indicator--994c2c85-77af-45f4-98c4-59b1f8c2194d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a068849-ecc5-4239-985e-845e65dc0148", "sighting_of_ref": "indicator--0a553f77-c921-4d52-ad4b-734569542c94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b38b45-ef59-40d4-9ff5-b939392a91a0", "sighting_of_ref": "indicator--472cbb61-05ae-493f-8196-803a7c324194", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20897e5e-c71a-4ed6-ab30-5056086a4000", "sighting_of_ref": "indicator--289cfab6-1313-469a-bd32-3050790213e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f81854-35c0-41e4-9a47-d1da4a2e3853", "sighting_of_ref": "indicator--f60400a8-4dd0-43d5-b143-8c490b915b93", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e613c2c-8310-4974-9831-fd3e2d495529", "sighting_of_ref": "indicator--2a5847cb-a7dc-49c6-ad17-0b0299fdc58a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493b0096-c610-49b6-805a-e937f771f410", "sighting_of_ref": "indicator--0456b456-c4a3-4872-87fb-1da33dfa4232", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4db7a5-e3cf-432c-8300-da15e1b94731", "sighting_of_ref": "indicator--cde213d8-8ec8-4327-9747-a396e89efd76", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd04b762-db6a-4493-aafb-3cc421a9666b", "sighting_of_ref": "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faa366e-56df-47d8-8a88-95d4e5b6b39a", "sighting_of_ref": "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5636877-2305-4298-8459-cd6d57134f7c", "sighting_of_ref": "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6ee782-5902-4534-8221-26a4b5a81260", "sighting_of_ref": "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd490c1-4511-4714-96bf-9b54e6bf6fb7", "sighting_of_ref": "indicator--9bf67d89-a747-4636-88a2-13723526ed85", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922b6851-528d-4752-9dfe-6ed3bab5e053", "sighting_of_ref": "indicator--f3afc563-ac3f-42e6-8607-adae9b681ac2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9f63b0-160e-44a4-ad5e-d4ad72420994", "sighting_of_ref": "indicator--b8e0a68b-f102-4560-b46f-56ce4acbfe54", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9143caae-ec84-42af-9fc8-3535824582e7", "sighting_of_ref": "indicator--b8e0a68b-f102-4560-b46f-56ce4acbfe54", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02933e7c-a79c-46b8-9f49-2878f74b5d1d", "sighting_of_ref": "indicator--0dfdd956-9255-4d41-aa62-c1e7d3764d57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab60b0d-c1d3-46b2-82e0-27e5f6252e6f", "sighting_of_ref": "indicator--b093852e-fd0d-46d7-836b-4d9d26aed81b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989b4193-8299-4341-b811-e177b51e4579", "sighting_of_ref": "indicator--e901d6a8-3560-4288-83b5-0d1589b02a7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ea0e1-eabe-4795-a8fa-d7aac0c850b0", "sighting_of_ref": "indicator--0d6684b0-151d-4fc0-944a-2e26f6429f22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798e28fe-6fa2-4e43-8e19-64e4679183d5", "sighting_of_ref": "indicator--6addbbdc-17c3-4295-a119-87f398a96752", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6845fca7-4d69-4ec4-8831-00ddb7ac313f", "sighting_of_ref": "indicator--7fd3237a-ac93-456c-b7ff-a8b612254422", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074c4d06-e13f-4fd1-85ac-4c475f82d148", "sighting_of_ref": "indicator--6283aef8-adfd-4f5a-aab3-33021468635c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f676238d-0883-42d9-bcf6-ede226b7dc35", "sighting_of_ref": "indicator--dca1c92b-e505-476b-af41-d30034c503bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefe0a87-e89a-4af4-bab6-b57e9d0e6ef8", "sighting_of_ref": "indicator--94f9bef2-7539-45dc-ab9a-54da553de67e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8e77c-50c2-493f-940d-4af7026f80bc", "sighting_of_ref": "indicator--4cf2173c-4ba8-44d6-975b-c8c78aee9d70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cd7f9c-59d7-493f-a87b-f06a42503e0c", "sighting_of_ref": "indicator--f55ae9f8-17bd-4595-8e71-56930f6dda33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e908ce-1d9e-4aa8-a59a-16b0d6bccb6e", "sighting_of_ref": "indicator--432087e3-be35-4b18-ac30-58cb4a25ffd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e215fc1-b260-43d7-a7c6-a0895a8c7a64", "sighting_of_ref": "indicator--95576e61-12b8-4633-a298-f1ce1b9ca302", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ec61d-9d8e-49bd-8bdb-0c584b8c8a6f", "sighting_of_ref": "indicator--4dc96747-34d6-46f2-a974-4a496b4f58ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b145ff-8aa8-444f-904b-0072e097914f", "sighting_of_ref": "indicator--7fc99526-5129-472a-8d02-f3a14c6ab094", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc0a2d3-e4cc-4998-82b9-f627c32faa8a", "sighting_of_ref": "indicator--656cdc43-33e8-44ba-b168-90bbf0d17aed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5395071-8d62-495e-9da6-1ca9c19ffb82", "sighting_of_ref": "indicator--37738ca9-d503-49c7-9308-e6c2aca03c78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd01cc42-86ff-4afd-bfda-83b4ff9982a4", "sighting_of_ref": "indicator--ecef3f8e-4901-4d95-a09b-a34d32c520b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157723ca-e52e-4155-9f62-7b8fc9efd2f4", "sighting_of_ref": "indicator--859e92e4-2639-4536-b0ef-048573ec4dd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0d1a5-1f2c-4484-94c1-915dd772eaf4", "sighting_of_ref": "indicator--16bc0da2-ea47-4066-adc4-3a90d17cd7f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8aa9b8-77e8-40ff-9ab2-ac3bef7aeef2", "sighting_of_ref": "indicator--215166d1-8abb-4cee-b7f3-79b55661cf56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba41bc7-820f-46f0-9e5f-d893a38da0ba", "sighting_of_ref": "indicator--f7853473-f864-4bfc-a5a6-52ebc9659d02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45cb2ab-2cc7-481a-ab04-9a9302564904", "sighting_of_ref": "indicator--627d5287-6477-4991-9993-a32a5e07ece9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8713e6f7-6cd6-49b2-a352-60a8de0e7f5d", "sighting_of_ref": "indicator--c3dd53e4-15aa-4591-9cd5-5f3165008a31", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97971e63-7149-4a88-9c48-3110a541cace", "sighting_of_ref": "indicator--e4585f12-2d94-44b9-920e-c5413ccf9273", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c1adbb-86a5-4a43-ba36-0bd9a3e82587", "sighting_of_ref": "indicator--393163b8-be69-459b-b507-6a3df9e6fc8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b712503-2d1f-4559-89ce-219c7a1a6dc8", "sighting_of_ref": "indicator--3fe63998-601f-442f-a249-7dd2621a4b26", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5682735-5dec-4d5c-83b4-cc6066d37372", "sighting_of_ref": "indicator--533a9809-9385-4277-929e-d3021810d4d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d89c93e-39d8-4b00-82d5-b35e72cc2dd0", "sighting_of_ref": "indicator--94487c55-1cf2-4f4a-9a69-36de140be91f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96967ff9-3028-4470-9a58-7e57d8c84fbd", "sighting_of_ref": "indicator--c80e2e4e-37d8-436f-935c-8c5548a6d8d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d6d627-f747-4764-a261-1d8a56b3bbdb", "sighting_of_ref": "indicator--7c196e89-94b6-401a-94a4-23c2437bf809", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaa6205-6d5f-4e28-a04c-8dc6d0f76584", "sighting_of_ref": "indicator--7c196e89-94b6-401a-94a4-23c2437bf809", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dcb4ae-b7a9-43ba-bd8e-6b6243bf998b", "sighting_of_ref": "indicator--89948a19-51e4-4b20-85c2-0e113237ee3f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6ac08c-93e1-41e7-baf6-5a9db14337dc", "sighting_of_ref": "indicator--9ce2e63c-67f2-4b75-9d80-7e10a5639a8e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a61111-0069-4b7f-a5f9-d7b0576f1c75", "sighting_of_ref": "indicator--31936d78-bad9-4c9c-a178-b703d4084535", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8b51b5-db35-4959-a209-cea99cee7780", "sighting_of_ref": "indicator--5fe98653-14ac-491f-a115-ac44fe88e901", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc02125-27a4-43c2-9242-d450b549a632", "sighting_of_ref": "indicator--d2744276-eedb-4be0-993d-f0f01fb2d7e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964ac4fb-fd34-43a9-99c9-b5863f97aa54", "sighting_of_ref": "indicator--9d3866c8-e475-46d6-a1aa-428b7ab66458", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fdd85a-b8b2-4aba-99cc-f099310b8b55", "sighting_of_ref": "indicator--2bdd5d03-3a59-41ef-82de-373ff7f7ea0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e676c2-734a-4a26-a419-af15e35e555e", "sighting_of_ref": "indicator--58d01217-8e38-4ab3-8058-c0c608bbd0cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f39b3-dc03-490b-b028-dda625e99f64", "sighting_of_ref": "indicator--2c7828c6-f93c-4d01-8d59-efe450cb2b9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb776fcc-b1bf-4432-b41c-a7c8bd8cfe5e", "sighting_of_ref": "indicator--f600ab60-a7a0-4313-a12a-c25fbf344cd2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6dc73d-134d-4818-ad94-23e668943dac", "sighting_of_ref": "indicator--74799153-e64b-456a-8034-7f5fd1be3717", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cf921c-cabd-43c5-9d86-e0a3359df484", "sighting_of_ref": "indicator--d4078f56-c1d0-48ba-95e0-1a042cc8687c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008874fd-7a0d-4460-9e8f-a0205a295df1", "sighting_of_ref": "indicator--89bc9c91-eccd-41a3-8beb-f99a53162789", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e67cf-39a8-4f66-b152-2f9b8779d4ab", "sighting_of_ref": "indicator--873af8d1-2461-4526-b336-6cc29266da29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02051ee2-b62d-4217-997c-44c2bab5d246", "sighting_of_ref": "indicator--87092a12-a68f-4aa0-a7be-f8a72358d45f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1327207-1b2e-4078-8c98-4ed90f726cff", "sighting_of_ref": "indicator--131e6f27-5a94-424a-b78e-f9b2655b9eeb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e429a8c-7994-4d46-ad2f-595391b612d2", "sighting_of_ref": "indicator--1c472517-bcaf-4995-ae2a-828698a130fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf18c5b1-5728-4e7b-809f-b0a930f841d5", "sighting_of_ref": "indicator--bc6831dc-ea96-4ba1-9e7d-12a6c548ee77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa207cb3-dd38-4f91-8114-f8e8b9dd3db3", "sighting_of_ref": "indicator--282d76c8-91bf-419c-b033-76c792de0842", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f01e3c0-1860-426d-8b36-1d9999c0b2a7", "sighting_of_ref": "indicator--0bd6d4c1-5f31-4f35-8832-7bdb80aa7c84", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f061250-2551-4e7c-ab8d-81e78f3f6e09", "sighting_of_ref": "indicator--cd546796-b309-4097-bd7c-aef471099103", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed027d7c-b242-46e7-bf5b-0501c2f31038", "sighting_of_ref": "indicator--f978014e-2cce-409d-b9c2-a63a3e716d53", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521f4dfb-3a53-41fb-a8cb-fa61d06a5e2a", "sighting_of_ref": "indicator--34f969a3-44b9-44d3-a855-bdae314e6430", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6837915-082d-4800-984c-a52675357b2d", "sighting_of_ref": "indicator--31c6328d-ba9f-4629-9bb7-516b4fe87475", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afe87ce-5525-40b6-bc5a-543270573af9", "sighting_of_ref": "indicator--01e9feea-8842-4a01-84d5-9d02cfe0ae45", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be67b742-bddb-42f9-ae9c-69237288a48d", "sighting_of_ref": "indicator--ba39dd5b-4104-438a-844a-ae54439cb6e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72fefe2-b466-45c7-996c-257bbcd7bc48", "sighting_of_ref": "indicator--df980a3e-2287-4e72-bb16-9d1685048d76", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee88bd1-bb7c-47b9-956e-d539ce58ace9", "sighting_of_ref": "indicator--8b719b4d-4a5c-4d9b-bd54-0aa63de86875", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e73abfc-cd22-4b6d-96e3-48cc30d22928", "sighting_of_ref": "indicator--286586ca-8cc0-44f2-9dbf-961287e5779c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f4e86a-a8b3-4d5e-ba2f-222d4bfe46a7", "sighting_of_ref": "indicator--4c0a0b64-0a73-421c-b6a9-386dfebff074", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61c4f8f-b5a0-4e5e-be18-f779ef1b5d54", "sighting_of_ref": "indicator--b9bfb046-8c25-496e-b28b-31019fc96284", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ff6229-bff3-4401-9a2a-119274fc1d02", "sighting_of_ref": "indicator--a4c1b1ba-5eaa-4637-af58-860925f24f27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b469b42-2f7a-4e5f-baa2-52361692483e", "sighting_of_ref": "indicator--1a79d1ef-8c01-47e9-a354-e2b0047cf5e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed3e4ba-2fdd-4319-9be2-0c74a000251b", "sighting_of_ref": "indicator--1109519e-e06e-4ddc-abde-92924aa5a847", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e665549b-99b6-42cb-86db-0a4a2e5c9816", "sighting_of_ref": "indicator--8ef374fb-12b5-4970-9048-84c3bb1078d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63646977-9cc7-4b97-9810-3f55f0b6f6f6", "sighting_of_ref": "indicator--d4d50dbf-35c4-4ca9-84db-adca816c4a55", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af38fa82-ca89-4671-ad3d-c84e5e0d4faf", "sighting_of_ref": "indicator--65671fca-19c6-4194-a39d-573f626b029e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d846465b-44f7-46d1-9568-0fe3e5826a11", "sighting_of_ref": "indicator--de032060-1ad6-4764-9821-23655a229816", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcba2f32-618e-4deb-a868-1bfe4c94ad0e", "sighting_of_ref": "indicator--327fbc21-75fb-4d61-8b36-e9b2603e9ba9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350a862e-687d-4ffb-80b2-b0673bf1b3c4", "sighting_of_ref": "indicator--65601a0c-7c6e-441e-b943-91695ecc28d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b945a20a-052d-47b5-90f7-dae931ccd902", "sighting_of_ref": "indicator--cc6524af-4c51-478f-b0e2-8658e37cf8d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f31acac-84da-4313-91f2-8721d3854050", "sighting_of_ref": "indicator--96adf9af-7ab1-4941-a763-11c49e9e696a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6449e7ae-b82b-4228-a6cf-3e3695562075", "sighting_of_ref": "indicator--3b688cea-e7f4-4d2f-bb08-8b32c8cc527b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a53c25-8d08-422d-8664-006da537c6c5", "sighting_of_ref": "indicator--ef907eef-d606-4101-b92a-37bb002a3fb1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c79d8a3-06f3-40d5-baa1-9909e939796f", "sighting_of_ref": "indicator--b6418c6b-cc15-493c-b85d-eef398fda3e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908dba86-9830-42da-bb53-1c835f241368", "sighting_of_ref": "indicator--7304594c-2117-4b93-ad41-18a0d7507d0c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7457035c-b053-46c2-8d95-165fb0fcbbdc", "sighting_of_ref": "indicator--cfaec9e0-d66e-44c1-911d-1f1d3927ce25", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a401a07e-07de-48bd-be67-9836a04353f1", "sighting_of_ref": "indicator--5ae74b26-0fb2-43a5-9afd-6340548c59c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d85a896-09b4-400f-96b3-5c0e38093809", "sighting_of_ref": "indicator--6f8ed152-6e0a-4166-8394-af8f7149430b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1912a7-bffb-4dcf-bd4e-1764e66f4f57", "sighting_of_ref": "indicator--2848e924-c772-441a-b7d8-c88c4ebc3fd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f97f07-ec7e-4b32-99b8-07f8dfb815df", "sighting_of_ref": "indicator--343f5b3e-70e3-43f8-ad14-ce8fff9e9eec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8b9985-83a4-475e-9a61-4c46ecc9c471", "sighting_of_ref": "indicator--1e073c01-f089-490e-be79-225dd6e3837c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a349e56d-913d-4103-acc6-b2af1810b815", "sighting_of_ref": "indicator--0e3234dc-f154-4c72-872c-8664ba66fc5f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a27d96-cdd0-4a22-9645-6fd75472570c", "sighting_of_ref": "indicator--2f9622dc-d502-4d1d-9d34-4b0b183efac7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fe54ad-8209-4abb-928f-161f03ba6064", "sighting_of_ref": "indicator--72d23a09-e24c-4c47-b78e-1619e1eaade9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a392f5a-8299-47b8-a269-0dad8a40495c", "sighting_of_ref": "indicator--7e8cef12-ad00-49d2-a5df-f93cc6a0e69b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e76806d-b5fe-412a-9bef-b77fced93c3f", "sighting_of_ref": "indicator--118d4131-fab1-4beb-9bef-dd812242c6d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdcb42b-d3f4-4d6b-9a3a-675a983bb32c", "sighting_of_ref": "indicator--61f534ca-6856-44b6-a4d9-b0f65f992a00", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d7d770-bdac-4322-a6d2-ffb547c144e4", "sighting_of_ref": "indicator--830a623c-69b5-4c45-9c6d-1a693a9c55b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdcc6e6-31aa-4aa3-bb73-18fa89aee91b", "sighting_of_ref": "indicator--9910d9b0-78c8-4f57-8e60-8b17ee5c0d07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0878beae-7638-405f-878b-c7f9b1fdbf70", "sighting_of_ref": "indicator--e19397cc-2455-4b14-8d19-7d12d59bc902", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dedf44-65a2-4cad-976f-9c99df451860", "sighting_of_ref": "indicator--4d3682c4-40c6-4128-967a-ca46c0e3b35d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1792dde3-c633-4a8e-9b50-2b1bb3d84e76", "sighting_of_ref": "indicator--6fdcd375-8a39-4283-997f-3731609826b3", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1490ce-7813-4dc9-8a67-1718abffa43d", "sighting_of_ref": "indicator--b2f24dc0-aa1e-4591-9852-7fb92fe71917", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ada69f-5c4d-4271-bc28-8796d36ec28e", "sighting_of_ref": "indicator--b94fb724-8dc5-4498-8765-e74a312de094", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090eb41c-d94c-43d9-b958-da504e004010", "sighting_of_ref": "indicator--5982d3a5-d00e-4163-a5b6-264997ae8f5e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5995f84d-e3c2-4344-9d24-646e10555156", "sighting_of_ref": "indicator--5982d3a5-d00e-4163-a5b6-264997ae8f5e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa735ca9-fc9b-4c12-822b-e24258934474", "sighting_of_ref": "indicator--8b337484-8b4f-4489-8110-b3e32e102dba", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa01e716-adda-4764-9558-3ed032fc0578", "sighting_of_ref": "indicator--4b3dbe2e-52eb-4442-ba5c-81747c72fd68", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d462f-5fb2-4f1f-8ee5-393a82a76c9a", "sighting_of_ref": "indicator--1ac9ce31-dd09-4a11-8f3d-35f4157b974b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875a7846-2248-4edf-a3bc-45ff60a11971", "sighting_of_ref": "indicator--8272694c-2442-4704-bc18-146295a3617c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b4a811-18f7-45dc-8f61-8d7ec21ed03f", "sighting_of_ref": "indicator--8272694c-2442-4704-bc18-146295a3617c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d9041f-d81d-47c1-bffc-a4fd8a2f355e", "sighting_of_ref": "indicator--7887e0e4-65ff-4184-9966-bfeecc739418", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864e7405-48a4-4d5a-9c6f-fee7c0ffca7f", "sighting_of_ref": "indicator--c9a46822-91a9-47cb-833d-1c83064e076a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c289dc-9329-4eb8-a876-cdcd9fbfb126", "sighting_of_ref": "indicator--487ba34c-dda2-495c-8646-a836b44d7e76", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484fdf1e-b175-4651-b87c-b76daf8237a8", "sighting_of_ref": "indicator--3c35a280-ccc0-4c89-ba0f-c4b0ca4a9354", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa466bbd-1612-4eb4-ad7c-1702ee601c74", "sighting_of_ref": "indicator--3c35a280-ccc0-4c89-ba0f-c4b0ca4a9354", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cbd166-0389-4afc-9fb1-188f4348fa09", "sighting_of_ref": "indicator--545f37de-1f43-4b6e-bff8-fc019ce1c76f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cfbecc-e40d-4cbd-b6da-e0dd767a598a", "sighting_of_ref": "indicator--fbfebf02-7d95-4464-8a9d-bef126821296", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310f160b-29b0-444e-9bf5-64b0868a9101", "sighting_of_ref": "indicator--b92811d5-aaec-459c-be26-d81573535c70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0b58b3-e9b2-40ab-86c1-9aa643f10e1b", "sighting_of_ref": "indicator--55b021b7-9937-4cdd-9a81-c9770bb837e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4163ea9-cedb-486b-95e2-e98c61876c90", "sighting_of_ref": "indicator--6857bfec-9a39-4586-9197-7ad4ab969eaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ec51be-1b47-4b05-bb2f-ce02ca7cc566", "sighting_of_ref": "indicator--948ed953-c718-48a2-84f8-792fba1903ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda59128-32fc-4972-a7a9-06d64cca321a", "sighting_of_ref": "indicator--3dc5d3fc-cc34-48ef-b81b-05d80f30972d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dd6be1-1244-42ca-af09-6312852bf65e", "sighting_of_ref": "indicator--27ff4f5e-9987-4eea-a9a5-613397a2fc01", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d624df3-fad3-4377-a4cb-12b16f8de6c9", "sighting_of_ref": "indicator--1a82fefb-4517-4d5e-9c0f-08c1754a0464", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb6a949-9feb-4511-bece-07b74cbbf468", "sighting_of_ref": "indicator--3a8e9b3a-d29b-4621-9514-bdafff6a90fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a545df5-c314-4332-a05c-cb3036e438cd", "sighting_of_ref": "indicator--7eb512c3-0950-4fa8-b6df-ecd147a3aca0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56f49b2-5932-4b1d-a3d8-00bf65e81701", "sighting_of_ref": "indicator--8fd7ca3f-3321-4b58-aeb3-9b45f1559c9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7908b00-d6ef-4a48-bf34-2e13bedbf448", "sighting_of_ref": "indicator--804f052b-bc7b-4e32-b823-ad5f34cb4f0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373ede3f-6f0c-4ca8-b0aa-e6767de122fd", "sighting_of_ref": "indicator--26122bd2-f301-4922-94be-dce629bcee74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52042162-fffb-4da2-aad4-4d37360c61e0", "sighting_of_ref": "indicator--6f4dbe38-8a24-4cb1-b295-0d1826fede0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc176c8-dc0a-4a18-9a00-ede2c7a54b06", "sighting_of_ref": "indicator--d8804cfe-2326-4696-bbfd-5cc1247d3d50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a1f577-a484-4716-b072-9a2863390877", "sighting_of_ref": "indicator--f7acf1df-e684-4c85-889d-12891af81666", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6648afb4-c117-4b6f-9a27-39c821901f89", "sighting_of_ref": "indicator--0f8fd578-db94-4024-8b65-4dc609ddf40f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcfef18-a9ad-4353-93ad-e1e66a5cd2f3", "sighting_of_ref": "indicator--2ee52965-01f1-4cf7-b78a-6ba33523296e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e39220-a4cf-4d41-bbc1-e5922191c320", "sighting_of_ref": "indicator--f54478fe-3559-42fd-8c92-d91af835da37", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48745d03-46c9-4df8-8507-766cb0c17d90", "sighting_of_ref": "indicator--ed20f324-b53b-435d-9953-93b127162107", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d595722-c8b4-4c21-8e30-4cbf81ac138e", "sighting_of_ref": "indicator--70643063-9fc9-4ba0-b091-c35bc3708950", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9c6024-a16d-4a75-ac72-a527369cd166", "sighting_of_ref": "indicator--18fbff5d-7f64-4bd0-b7ec-2d1bbb6061e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77676163-6ef4-4edd-85bc-bb0d4dfa0544", "sighting_of_ref": "indicator--0ef18544-a6a5-4f5a-9dc6-5aeaba1d5ccf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5c06a7-83b2-478e-9fb4-41d8fc8c77fb", "sighting_of_ref": "indicator--8bf2b935-db9b-49d5-8377-6b52085e748d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79089614-05b8-4100-ba3f-02d75a086cf4", "sighting_of_ref": "indicator--6532ccc2-4d88-453c-bb90-90d87f0e18bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732286d7-3e11-447b-a2ad-13cc1e5d209a", "sighting_of_ref": "indicator--84333a05-ad32-4e63-b664-6b0a830ec8db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489e1c9f-41e6-454a-bbb6-3cb45dd49d86", "sighting_of_ref": "indicator--e071f0a1-9f6c-4acb-8c48-e095f1073c96", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd6b45-fc48-48e7-bd3a-b9751e4787dd", "sighting_of_ref": "indicator--6bbea87c-f6e5-4c2f-ae29-742305374a66", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038ea368-0b2c-4f98-acb8-b7939cc30000", "sighting_of_ref": "indicator--228f7790-5aa7-4001-8c10-0a36b221136d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9febaa-62b9-45d6-bb3a-3ae0a0579d5b", "sighting_of_ref": "indicator--849c45fa-0608-484f-9b8f-8544fb81f6c3", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6510f342-d259-4090-8a4f-d4ea56766be7", "sighting_of_ref": "indicator--107b7250-3906-4538-98a0-3f130a0917d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75d4290-0181-4cd0-903d-d5d0163f921f", "sighting_of_ref": "indicator--c2ecf64c-fdf7-4fae-9f66-5eaffa95fcb9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53806b4-d4dc-422c-b848-5aca4af87f64", "sighting_of_ref": "indicator--c2ecf64c-fdf7-4fae-9f66-5eaffa95fcb9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc554e0f-b3e6-4aae-9658-f0e27240f5ed", "sighting_of_ref": "indicator--96036883-4eb0-448c-9c1c-2ea6e591271f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715da18a-1ae1-4019-afcf-1c37b0eccb5a", "sighting_of_ref": "indicator--5d11b8da-007c-4ed8-9e2a-c02a55c03ff9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb1d590-1926-4533-9f71-0d97fc6af6db", "sighting_of_ref": "indicator--e8e71aa4-09f9-4349-9272-343ebaccc586", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d36bdb-526c-43fb-9b8c-5ba18e81e343", "sighting_of_ref": "indicator--9e26f8cb-de58-4819-bba6-d5a48467653d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c818f6-8212-4ca0-bd97-f6dd657698c7", "sighting_of_ref": "indicator--d9c3a0bd-4772-4b06-a944-e00bf6fb7135", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e9e980-9571-4aa1-af65-9c831d586183", "sighting_of_ref": "indicator--d9c3a0bd-4772-4b06-a944-e00bf6fb7135", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccdc11a-e509-476b-98ff-c1a128c8c77f", "sighting_of_ref": "indicator--81f7340f-bb16-4a67-b0f9-efc07ca5e15d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73060c4b-e4d0-4b7b-932b-498cc0eb3768", "sighting_of_ref": "indicator--81f7340f-bb16-4a67-b0f9-efc07ca5e15d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb71fcf2-edd6-4dc3-b0a5-bb9719066a24", "sighting_of_ref": "indicator--ae631124-08d2-4429-b620-2b5d703d3f66", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835e87b6-471a-4c4b-ac52-68fdaf55d13f", "sighting_of_ref": "indicator--ae631124-08d2-4429-b620-2b5d703d3f66", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f707ee0-bdde-481b-98fe-38f39a4a1839", "sighting_of_ref": "indicator--d336fcfb-7b6a-4165-8c72-99138f764f23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099606c1-b9be-42c7-a8ac-b2c84e9b05e5", "sighting_of_ref": "indicator--6b254878-cb9b-448e-8c29-46ff4e7b3a39", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547969b6-8beb-4c03-8487-0b5017cc5d57", "sighting_of_ref": "indicator--1af79e59-dcac-42df-a6ab-1f6044d14e05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce92f3d-e7ff-4aa3-97ea-08684c2bafbc", "sighting_of_ref": "indicator--4a67d33f-1a9b-46af-8d9b-bf282ea9bfaa", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f80d218-389a-47ec-8ae7-982e0b4938ab", "sighting_of_ref": "indicator--4a67d33f-1a9b-46af-8d9b-bf282ea9bfaa", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5577871e-c9a5-4412-8e0d-a1de57f988ca", "sighting_of_ref": "indicator--8d594fcf-4095-4573-ac27-f432a323afdc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6db8651-1c46-4f1a-a2f1-baab6c42c0e8", "sighting_of_ref": "indicator--8d594fcf-4095-4573-ac27-f432a323afdc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4335f457-3427-4827-a326-7ebc10886643", "sighting_of_ref": "indicator--1ff54a73-bf3f-4355-865c-f25fed0e9f72", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a87fd4-4a8e-4733-b47b-36f018bd378b", "sighting_of_ref": "indicator--1ff54a73-bf3f-4355-865c-f25fed0e9f72", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca96ce92-44ee-4f6d-96ae-edec5bf92dda", "sighting_of_ref": "indicator--3e59feae-5ea4-44ae-8af6-7c231f199a02", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cd49d8-6647-4f6b-a811-a8bc856e9699", "sighting_of_ref": "indicator--3e59feae-5ea4-44ae-8af6-7c231f199a02", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9940dd1-d2e1-4944-b5de-1d91e362291a", "sighting_of_ref": "indicator--db912a1d-f981-48b4-b05f-2d46ff08e72b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81da9f3-f5a6-4b15-8ad5-e332b4b7539a", "sighting_of_ref": "indicator--db912a1d-f981-48b4-b05f-2d46ff08e72b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0762f1eb-9fed-4f1d-8f12-e9123142dd11", "sighting_of_ref": "indicator--2a14fb35-444a-43f5-a40e-4d6edf53e168", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19244930-ee91-4d1d-be65-194b32f97168", "sighting_of_ref": "indicator--2a14fb35-444a-43f5-a40e-4d6edf53e168", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa012ee4-c8af-45fc-a2db-b1921889bb62", "sighting_of_ref": "indicator--d576cba8-c8f6-4007-ad2c-cb4ecc1087c0", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faa9ca4-fc87-46ee-976a-7c10c1692fe3", "sighting_of_ref": "indicator--d576cba8-c8f6-4007-ad2c-cb4ecc1087c0", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd77d72-bd37-44a4-99c3-bcf71365f519", "sighting_of_ref": "indicator--dfed63ee-ec57-47b5-bbd4-aff4a1bb720d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf353d8-81fa-4860-ae82-d891f4289d50", "sighting_of_ref": "indicator--dfed63ee-ec57-47b5-bbd4-aff4a1bb720d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c08bbb4-8b71-4ed8-b2ec-aaea1328187e", "sighting_of_ref": "indicator--f7de0b1b-723a-4c72-87d7-f418936d0864", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eba50ca-5873-42e4-b765-91504d46c222", "sighting_of_ref": "indicator--f7de0b1b-723a-4c72-87d7-f418936d0864", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d01847-0c1c-4dac-8594-c2bb94620b73", "sighting_of_ref": "indicator--a5826678-f182-4a27-817a-bfdc84c11a14", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77de7351-b016-4e87-ac79-85d863488efd", "sighting_of_ref": "indicator--a5826678-f182-4a27-817a-bfdc84c11a14", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6474a12a-bbb8-4007-9a4d-2db02d4a04d2", "sighting_of_ref": "indicator--0499a02b-253a-4209-8728-fd859f33de82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11355b0e-22b0-418c-afac-328ccc31543d", "sighting_of_ref": "indicator--814089f4-8995-460f-a7c2-c60b3782ec6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68558b5-b243-46d0-8aba-54e30cb09b63", "sighting_of_ref": "indicator--8e73ed38-d3f6-4cb3-9655-fe6c44e88b8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5388383e-a994-4e02-9111-3fa3677d3ccf", "sighting_of_ref": "indicator--40933361-b354-45dc-a0f6-8b1f65c69609", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7235e791-3e87-4608-b33b-2d79bc98c18f", "sighting_of_ref": "indicator--4b226a92-3ba5-4267-a885-a1d9fb09b29f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a06e1e-3369-4715-8032-ce7a2b8793ea", "sighting_of_ref": "indicator--3278302a-0e9d-421c-be1d-b9b8d6011e90", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e92b90a-4e88-4a69-ad57-6f5b6e4c2623", "sighting_of_ref": "indicator--c5b8f2c5-2745-468b-ba86-a0e5c42bcb23", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739711c5-3934-4fde-9ca4-51f0f3f963bd", "sighting_of_ref": "indicator--2795e5d2-b8cc-49f8-97c5-b9eeb5135a9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1e3554-6aa8-40ef-86b7-86fdf510bdf5", "sighting_of_ref": "indicator--58d8575a-6248-4396-acc5-12d9cdefcf48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9bb871-d79d-42f2-8e9e-7ccadd195d22", "sighting_of_ref": "indicator--6bfc18be-b4d7-49ee-8d81-c9666de871dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c8d213-152a-4b3b-b501-a3b8c14a81fe", "sighting_of_ref": "indicator--4a921dc7-012d-4ca3-9437-4b26cf2ef646", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a367e105-5ee6-4a15-bf02-6cc924976f1a", "sighting_of_ref": "indicator--b38e1c8b-d360-4baf-9464-66bfc0a552bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efda8904-398a-465d-b208-d04f9050d81e", "sighting_of_ref": "indicator--d9e9d579-6dd6-4c2b-9d46-a8a020443812", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9070e4-fb0c-4627-9ce8-21f8aa21caf9", "sighting_of_ref": "indicator--0945e188-34fc-4cd4-8760-9b4d2f31b607", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6687a6-377e-4942-b3d1-5d30744c52ba", "sighting_of_ref": "indicator--fef844f9-f88f-4e52-8ddd-8e62050d8bc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15507ab5-3a3e-4077-82fa-e1c566cbc617", "sighting_of_ref": "indicator--267de658-eaf1-4daf-922b-97e0cc7a8510", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab9dd4-f47a-421a-8472-1563f6a53808", "sighting_of_ref": "indicator--8e7dac26-6f3a-442e-a7a9-03eadc324ca0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77943711-9784-4121-a7d0-df8cc0602e9a", "sighting_of_ref": "indicator--36a8d43b-ced8-48a5-87b2-86a713709c7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc73269-f0f3-4347-b06c-a6becfccde4f", "sighting_of_ref": "indicator--57327fca-b4b5-4a39-8999-f290b3e4f50c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826b57ca-d27b-4fbf-8824-f01e976b724d", "sighting_of_ref": "indicator--ece077a7-c187-4264-a599-e7e14ff407ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d225c1c-ae99-41af-8b2d-be3e4e492950", "sighting_of_ref": "indicator--718fb8a0-5bcc-4aa0-9caa-483276d74d06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6082175b-f59e-46be-9171-d6221d84f2c1", "sighting_of_ref": "indicator--b80ce153-5ef8-4eda-94e4-4570b8685679", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22c921f-1ec4-4c40-bece-e782147764ee", "sighting_of_ref": "indicator--3b9b1b18-833c-4f5b-8109-f8e9914c1281", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d924ff6-830c-4af4-a921-d99fa22ffa88", "sighting_of_ref": "indicator--8ee575df-62a5-4449-be09-5dfaaae38fb0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c93710-4bf7-4d14-9a10-dda2ea4fca58", "sighting_of_ref": "indicator--9e379b72-a56a-4d1a-a385-692f9e60c8af", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39e4d2c-3b56-4121-9e99-08b4cedcaac6", "sighting_of_ref": "indicator--f4722be9-e775-4fbd-852a-e7a2a00a1f18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93080fd7-1814-494b-a0fd-56d41de20f06", "sighting_of_ref": "indicator--3db8d8eb-f562-473d-a64a-c87a4a276dab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2200c8-1676-469c-9592-dd2188f2ac2e", "sighting_of_ref": "indicator--3b32e230-ec5a-4cd2-81ae-9bcf732aa92e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0802a47b-6cb4-4ee0-840c-3be0ac937317", "sighting_of_ref": "indicator--ef8a46d8-07f5-44b1-a702-68998821acce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a596c2fe-4b04-4401-b3d8-924edd9626c9", "sighting_of_ref": "indicator--c63db43c-7a47-407a-9315-983dcd735890", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8849d084-7ddc-4793-8103-135ee28aa6ae", "sighting_of_ref": "indicator--7f68f8fc-c417-4a63-b65e-f9ea4c2164da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dd9f7c-ff72-42aa-8634-cd13e69b6b53", "sighting_of_ref": "indicator--26d6a26b-1f8b-41cc-8d27-9b9ce2224035", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bd32c5-6f0c-4d11-b90f-f83b9939b7b3", "sighting_of_ref": "indicator--3f7daf55-1e19-4df6-b3c4-a834a7aceef0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe32308-3817-4829-97dd-bd90ccd19bbe", "sighting_of_ref": "indicator--51ff2f15-7025-4401-9116-6b89acdb674a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f5c806-39dd-4038-a39b-40a2b43e2a1c", "sighting_of_ref": "indicator--123836f5-2d79-4966-8ceb-d58d0e0a01fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4edf47b-e7b8-4ebf-a5e4-22c2c634f50a", "sighting_of_ref": "indicator--8d3190b1-09c3-4cb8-89d0-333525d52195", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1446060a-ae60-4f6b-bc38-06c28c4e3fdb", "sighting_of_ref": "indicator--9a6cb3f4-fb0b-4adf-a387-13be0fd60373", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2ec7d5-0ee8-496b-b4ef-1aec939914fc", "sighting_of_ref": "indicator--f4b09a9f-6b96-4bba-a26a-132a3c425d9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0b8800-3211-44d9-8ac7-995359f9acc5", "sighting_of_ref": "indicator--0ff4a285-fdf6-4b56-9549-ba78e41d6609", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a4c2a-8fab-4803-b7f4-df2660f8c426", "sighting_of_ref": "indicator--d861a788-5266-4109-9eb4-7d657fb1f33e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac9b5a5-f0c0-4d7a-97ae-b9f16f9e553f", "sighting_of_ref": "indicator--22b5f84d-6865-4657-8fd8-c30f40763230", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993fee0b-cdb8-46ee-af7d-f97080046602", "sighting_of_ref": "indicator--6ac94446-0568-4830-bb91-9c8844326299", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564dd1ac-9d10-4c52-8188-d2d06abc6061", "sighting_of_ref": "indicator--fc007130-e04f-473b-baf6-096ced95a18f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee6b87-1272-4559-82fa-dff5cb8562e3", "sighting_of_ref": "indicator--4f58eb01-1c4c-4477-99ed-caa757c6ed1c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf2d8d1-361c-40c9-8de3-50b86e8878f1", "sighting_of_ref": "indicator--f0d2db8a-f746-4503-afc6-d586a026e1bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a8ab2b-4753-4b2e-ae71-7580a6854b02", "sighting_of_ref": "indicator--01076623-bf4f-4908-9966-5447056d8a4e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a6c930-f05e-4f23-934b-4ec7b264f5da", "sighting_of_ref": "indicator--ddf37839-e84a-4660-84f2-6c34a4221bca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4726df-020a-41f6-9336-02520ea8372f", "sighting_of_ref": "indicator--0336e870-c237-4902-8ff1-ce6afe90fb4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef74c117-5ed3-4c02-920c-e65a53c17d7b", "sighting_of_ref": "indicator--97e708c3-b13f-4040-ae71-59078352797c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f6b1d6-8ab5-4b54-950a-ac0540dc1195", "sighting_of_ref": "indicator--97678e3d-7039-4bf4-9fde-96b86326a7e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e08da1-7df5-4381-ab70-57d421b889e0", "sighting_of_ref": "indicator--d7f2a18a-9fda-48d8-bbb3-7d3c37e484ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f0f2c5-2935-4025-9be6-acdb6803036e", "sighting_of_ref": "indicator--bf52f945-f7f2-49e1-a403-8b96805217cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29400de2-4a79-4e75-b48a-9950d9fe0269", "sighting_of_ref": "indicator--ca4374ad-b0b7-4398-a7cf-0df01583a150", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4682211-4f9c-4efe-b17e-9a21ff1e81ce", "sighting_of_ref": "indicator--f37d8673-0108-4826-b02b-b97bfdf772f9", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820944d4-6392-47bb-bcf3-a33d5e5f1ae6", "sighting_of_ref": "indicator--2cd0e80c-5bd6-4c33-8857-6736db6be27c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18ba986-1569-4a0d-904c-de6897211827", "sighting_of_ref": "indicator--2a523a70-7223-452d-94d3-9706548f86bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6168b636-5e0d-457d-a4fa-d412b04796d8", "sighting_of_ref": "indicator--181e8a81-60ad-4d6e-9716-e279f21ad29b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9f4803-f619-485b-b44b-120e15839965", "sighting_of_ref": "indicator--91f4a5ca-d8c0-4814-840e-dc2937d3193d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e4caf-1c7d-4b79-b0e0-78e2a4cf839f", "sighting_of_ref": "indicator--22e699d6-aaa9-4131-b93f-d6221104278b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2e52e7-4b07-4c66-9677-7d8f1b6c29cf", "sighting_of_ref": "indicator--b27aa744-5787-481b-a606-7b79832a7a98", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80e206d-fb83-4785-843f-5b8d5d0fc093", "sighting_of_ref": "indicator--9bb0d7db-fcaf-4451-a71e-10b3b8de3965", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba508250-bd65-442a-be99-d52a9b09978c", "sighting_of_ref": "indicator--d278f3fd-8e65-49b0-b2eb-6e52394baafd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c6cd26-0144-4837-8698-5d7099b1da5b", "sighting_of_ref": "indicator--eda65845-986a-4b11-b56a-6ce7551b4024", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e731d4-777c-4bb4-b06c-44d589a9743d", "sighting_of_ref": "indicator--89abe040-e69b-4125-ae0f-76f4b31d0249", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec25509-6ceb-4189-a33f-2478558d5634", "sighting_of_ref": "indicator--b0c91e88-a307-491c-a127-691daacc9c0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e3706-0964-45b0-a294-da27d4be3b6d", "sighting_of_ref": "indicator--f9ea05aa-4e33-4c0d-92e4-eafcdfedb2f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a6df87-c5f0-488e-ab03-d901979c113d", "sighting_of_ref": "indicator--f03b3949-6dd9-4bef-a514-a52a5ff3fe0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30706934-0b5a-4953-8d0f-7f095f6900f4", "sighting_of_ref": "indicator--50d3d7d4-c255-40b8-ab02-248975f4233b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649a78f6-76a7-44cb-b474-b0700cffeac3", "sighting_of_ref": "indicator--6714bac5-b032-459d-8502-86b54534f035", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9ff253-4464-432a-8432-0c7ef8a646e4", "sighting_of_ref": "indicator--aa745fd5-c566-4ae5-a987-626f1093003c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f6fb13-29a3-4f08-a85f-c8d4cb663160", "sighting_of_ref": "indicator--698c888b-b7cb-4046-87f7-c86652ccdb55", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7e947d-9d71-4c45-b672-0f2a69ea3bd7", "sighting_of_ref": "indicator--d5c54010-601b-43b1-8d77-70d744058c67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82723b1-be41-41a9-9acd-50f5412d4cff", "sighting_of_ref": "indicator--af89c9e1-0984-4b5d-9504-1c083070d815", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b84d7f3-6719-4754-9aca-a91b3e3ee1fa", "sighting_of_ref": "indicator--2c5c8f89-b8ea-4a1d-84dc-8a7727347b0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d438f4f8-56d8-4094-9f39-f92a4efb9d6c", "sighting_of_ref": "indicator--9b2d5e8d-4454-49e2-ad65-19a21643284a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e4c4b6-1b75-46df-b79b-01f2f8c366ee", "sighting_of_ref": "indicator--698ab7fe-93ac-4d62-9081-8fadfb3c9dab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13854a10-17a7-4fd7-b736-e62be5eab722", "sighting_of_ref": "indicator--a789a606-4253-4eec-a760-1ee29ee0f56d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c439778-87a1-4155-9dcd-4524bc88fdd2", "sighting_of_ref": "indicator--0a44a21e-d103-4503-a1aa-00aa502ad116", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a000a5-dfec-4ee6-baf3-db87fafa554a", "sighting_of_ref": "indicator--85b8bd08-5693-41c0-b50c-cd6fe24fca09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2df307a-094c-404b-9462-ef2c199e528e", "sighting_of_ref": "indicator--2e30656e-821b-48d3-85e6-da51da3dbc73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121e7e80-50ec-463a-b319-bdaa13c032d8", "sighting_of_ref": "indicator--b0388b05-cb66-41b6-bfc1-d8ccbd3d8680", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e7576d-1e9d-438c-b9b6-0be4df708693", "sighting_of_ref": "indicator--ceb07d90-a40b-4c5e-a26c-ff328d1cda17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d641ced6-5880-40fe-be70-c0d1aab97083", "sighting_of_ref": "indicator--78705304-82b3-44f9-8e3e-defdc248a40c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145046e2-5d45-4c6b-a573-aacbffa2aa31", "sighting_of_ref": "indicator--78705304-82b3-44f9-8e3e-defdc248a40c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6520f9-fbdb-4a36-90cc-dd4c1527f800", "sighting_of_ref": "indicator--0a297d76-0390-4fd7-bb51-b6b80f335b81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9de17d-f43e-483f-b4fc-865c2d3605a0", "sighting_of_ref": "indicator--890dc18b-b09e-461b-91b1-8199a9b7b27a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1b9fa8-f608-4a81-b7a9-2166b7388394", "sighting_of_ref": "indicator--b4bc9d62-a0dd-48dc-90fa-8b6d893fd1f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3b67f8-897a-49f6-a0aa-e07cce22cd75", "sighting_of_ref": "indicator--781e8e7b-f574-4ba4-bb4d-00b785a67640", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c861b8a1-21a4-4062-a3c4-b5c2fc25609b", "sighting_of_ref": "indicator--3c6bfffe-8f78-4b04-bc85-28b19b586434", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6235513-3b4e-4203-9fea-bc234a455c79", "sighting_of_ref": "indicator--8545b48e-db01-4035-9860-3b6c2ec2df75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f13ae56-4b39-4588-bb5d-500bb49892c6", "sighting_of_ref": "indicator--064fe611-70f3-46d9-9a4a-d8351e8c0857", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98c4807-d433-465e-8e48-8881544dddad", "sighting_of_ref": "indicator--c3db9664-0e26-44a3-a27f-35de850e69c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbd3886-edd2-48ce-ace0-c50c22068126", "sighting_of_ref": "indicator--1b5bc9c4-b87b-4386-8c63-45c2fa3beccb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1042eeab-889b-40aa-b60f-cdf0b54755cd", "sighting_of_ref": "indicator--8b43c5cf-04a4-47eb-a3cc-0b2c3f08c35b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e630d6ce-11d7-4ddb-894a-936b4acf8723", "sighting_of_ref": "indicator--2d9e4087-59fc-4cdd-8e4f-ce63f2028690", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1746d404-749b-4521-9113-f0e358e8a69f", "sighting_of_ref": "indicator--53c545f5-7a96-4b90-8982-ee35b21dc2d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8cafd2-247b-432c-b084-17b307894ef4", "sighting_of_ref": "indicator--e466c8e9-002c-43cf-902e-f1bdfe27c2cd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327a99eb-ddd8-43b2-ae20-f9ea1748a8b5", "sighting_of_ref": "indicator--bdd16055-be79-4185-9fa4-43cede48d674", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ba80e9-d86a-492c-be52-48d864baf970", "sighting_of_ref": "indicator--ae261de4-8cd8-4594-a9cf-6602383051f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d2fde4-26c9-498b-8ecb-d93372caaf94", "sighting_of_ref": "indicator--46c6dd9f-d623-42b6-9db8-0a6ccab60ce4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d6071e-0b37-45a8-be02-b4666aba5f75", "sighting_of_ref": "indicator--9ceb2086-a8dc-4771-971c-898cf54a5051", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08056977-4e31-4d41-b5bb-e257d1be4f32", "sighting_of_ref": "indicator--0b765122-e645-4818-b55f-b92abd7e0906", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd151cd-c512-4386-99ab-04bf1aa952b5", "sighting_of_ref": "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fccf9bc-eb99-4a53-a23f-13eca88371af", "sighting_of_ref": "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612bda48-63a0-4d3b-8832-620200dbea55", "sighting_of_ref": "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89231f1-d77f-4c47-96ee-aca88dbb16ae", "sighting_of_ref": "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca1c748-f0ce-4549-9736-92ad155a6ec2", "sighting_of_ref": "indicator--8ea38837-03ff-4c2b-9ea2-e57c729adc2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf337ef-5f68-4ddc-945e-0ccb619bd8f4", "sighting_of_ref": "indicator--128e6ea5-7a10-4853-bf36-3181d4aad627", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc383df-d5fa-4e34-8238-3685ee443e11", "sighting_of_ref": "indicator--f8afd2b4-4c3e-4af7-a90b-b900fb2cf2ec", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca812f2c-2edc-41dd-82eb-fc74ddce9199", "sighting_of_ref": "indicator--f8afd2b4-4c3e-4af7-a90b-b900fb2cf2ec", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61da45d1-4874-4d16-aea6-df1506cec293", "sighting_of_ref": "indicator--f33ba7f7-7123-4820-bdbd-1ec6d2406cf2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1285f4e-4828-4d39-b54c-7a40b40fbfcf", "sighting_of_ref": "indicator--92c61b8f-b4ad-4cb6-aa7e-6c1129f9b82a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa6db0-6464-4c08-96f6-4f9439f80abd", "sighting_of_ref": "indicator--8491bfcd-1911-496b-bf5a-04a78e78716b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f912efa5-89d2-4c85-9c3c-3f43e53c7544", "sighting_of_ref": "indicator--fc535b2f-7630-43d7-a53f-a9f26fc4d135", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808accf1-a3fc-4a09-aeff-e92abc66cbe6", "sighting_of_ref": "indicator--0861940f-9590-4670-9c96-ef17a72a6f1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e3137-d791-4d70-90f7-e270c655401f", "sighting_of_ref": "indicator--682168f6-0615-47dd-82d1-dcf21639f8d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e38cdf3-998d-4b55-a887-a19710665d01", "sighting_of_ref": "indicator--bf5464b4-3147-4d25-b8da-1946165cfc29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c09b430-7ab7-49ae-a8ae-e1e7a4f4c0e8", "sighting_of_ref": "indicator--ea5b895f-55fa-4d80-ab71-cefac179befb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b28d35c-85a8-4580-bd11-f33c4046ed2b", "sighting_of_ref": "indicator--48c183d7-b97a-4bd7-9987-325dfe14bb5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60ceb5b-3624-4fec-8d8b-01341d99b0d3", "sighting_of_ref": "indicator--f52a77b1-411d-4afe-8a23-e29b72e56f7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ea38b8-0de0-4ffa-94fe-0199d919b2e4", "sighting_of_ref": "indicator--010ed831-9175-44a8-b086-6a0cfe1544ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1077ad8-14b3-4fd3-aa42-99930082511f", "sighting_of_ref": "indicator--c2e4912d-733a-4225-b078-58f43f28b1f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306a8e99-3a61-4233-a4ea-4bb0e4359d7e", "sighting_of_ref": "indicator--abde7fe7-c8a4-4feb-8f5c-5442580dfc09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a798da8e-760c-43b7-b142-dff8873caf74", "sighting_of_ref": "indicator--054250f7-f84b-43d6-a7bc-5fcb2be19665", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6c5ec3-dea9-412d-af16-de879fef0366", "sighting_of_ref": "indicator--77060513-e818-4941-b584-25077454de27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b303a5a5-0f60-4dd7-a34c-5d4f1cad1514", "sighting_of_ref": "indicator--62ab6e55-329a-413f-a141-f7ff2435ebb5", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1fb45e-3672-4027-ab1c-509ff9d00c36", "sighting_of_ref": "indicator--62ab6e55-329a-413f-a141-f7ff2435ebb5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefef130-fa7e-4ce9-a070-4b1e8bbb34d1", "sighting_of_ref": "indicator--20b179e1-8b74-4155-8d34-6b9ccb6cc10f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ff59bc-d5c6-4d88-b4b7-5e982be17fb1", "sighting_of_ref": "indicator--cb68c76c-3173-4200-a3ef-9738b78817ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a96b94-ef18-438e-910b-3e4178e14bbf", "sighting_of_ref": "indicator--81d44bc2-ca25-4abc-8c2c-c62ec07a03fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48e5469-e432-4168-b3bf-b9928ab0a417", "sighting_of_ref": "indicator--8b9d819d-7802-4415-80c5-e1e3c16c7a70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a729b127-c2bc-46e2-9f1b-93936fd840fa", "sighting_of_ref": "indicator--7ebf45b5-917f-4d0f-bf27-199d5d2c6c6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae421091-ac80-48e5-9342-8563f99eb93c", "sighting_of_ref": "indicator--a6088757-bcd4-4a78-b8e5-01a0f6a597e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dd63f3-100d-482d-883d-671d0eee4081", "sighting_of_ref": "indicator--bb246bd7-dcf0-482d-813b-177736b2b82d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5dd107-dd21-40f9-a3f7-bbbad95893b3", "sighting_of_ref": "indicator--19da07ba-ca04-4ed4-8f99-b83af64b0cd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f2208b-5c57-4f9e-8f6e-9e7f0d7b13c2", "sighting_of_ref": "indicator--f1d38eab-05a4-4b73-8ee8-a5ba95db082a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cea844-47c9-4795-9627-d31697ea5699", "sighting_of_ref": "indicator--79661d80-997f-4cc2-ae88-44fba387c872", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e2cbe-ccca-4f85-a6c3-6b93755ac659", "sighting_of_ref": "indicator--d941a5fe-6482-489b-a56b-847005a3727c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd26d604-5561-4748-a69a-91069a59a0cd", "sighting_of_ref": "indicator--0cae9f6a-0cbd-47f9-acff-27da8980702d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3cb8bb-c021-457a-8ecc-0a767a7a570f", "sighting_of_ref": "indicator--b1266761-48db-4c83-9bdc-8e9b0ae95d1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11865c42-1e61-4901-b172-5dd72d341358", "sighting_of_ref": "indicator--1f50d164-f775-4f7e-86a4-17bc937bf9fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aed1071-e301-4b01-a28c-c730bf676656", "sighting_of_ref": "indicator--00b5d174-9789-494d-82a4-9672bae6aaa8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185b3f75-c39c-4562-b910-ab2896f2e2d4", "sighting_of_ref": "indicator--d9a1b006-6c4d-416b-be34-a4ca1b11f250", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f402bdf-fe0f-4c57-b154-b9aa7f546a1c", "sighting_of_ref": "indicator--e8abf7b6-03ea-4ee5-8cb3-0fe9402cb3ef", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e875540e-ab4f-41e7-884e-61aa570c3b93", "sighting_of_ref": "indicator--e8d2c9a6-55d1-45bc-8f99-aa5056889bb4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5979d784-ec26-4700-ba7c-c885295f0ca5", "sighting_of_ref": "indicator--2531d93f-e536-44d5-b832-26d77c2a4eee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f163243-8bcc-438e-8d1f-7c74dbf336d1", "sighting_of_ref": "indicator--c9a9fe59-b42d-4953-aca1-4804dfafdba8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7ee984-ecba-4017-9775-472a99212e0b", "sighting_of_ref": "indicator--5a5b5c0d-a73f-4f2f-81c0-842daf98a54d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44453ffa-7014-46dd-9693-6f54b6e4de42", "sighting_of_ref": "indicator--f7922887-30be-4ea0-b540-3ca34ef8d1cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4d16f0-ddb6-4437-9625-bfcff3d37154", "sighting_of_ref": "indicator--1bc448eb-bf22-4ff6-9643-c349db44d203", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88af44ca-0ac8-46a3-aa5b-5eb768732d1b", "sighting_of_ref": "indicator--d7a68287-42c2-4930-9e96-5f40d314464b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943559bc-2099-4bc6-a9a8-1683370944c4", "sighting_of_ref": "indicator--72e8073a-369d-4c93-bf4c-671270e1d348", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d819954b-9d20-4c3d-9dc4-311698bfa700", "sighting_of_ref": "indicator--57902d87-40c8-4598-8012-57772b43d7ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d63b1c9-daac-4f51-b9b6-d682cfdc4580", "sighting_of_ref": "indicator--9c312fe2-3f64-4bc3-8eec-9dfacaf406e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7205b8-110a-4f47-a48f-e66d54164ac6", "sighting_of_ref": "indicator--f0cbe61d-d7b9-470c-932f-fe77dccc42c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a6a868-b184-467f-86a8-e20749cc974e", "sighting_of_ref": "indicator--ccbe79a1-bf81-4bdf-82db-92866d08456b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3407e960-12f7-4333-aae4-3e0a58f97e3a", "sighting_of_ref": "indicator--e61c3e85-b25f-41df-84e0-024dbbf32ce3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c906ad9-ac68-4ece-996c-8ced1a14a1fd", "sighting_of_ref": "indicator--1e9ac371-eef4-478a-a4b0-705b089704c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3203d50c-089c-4fbe-b930-6c61fdda6619", "sighting_of_ref": "indicator--cadfa585-5997-4cf5-80e6-5beb513151b0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9abb2a-ead2-474f-8ae2-f2d68b12dcee", "sighting_of_ref": "indicator--ca59ff04-6d29-444a-b507-81a9cd47b89a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0f47d3-df34-4dd4-9c82-91c397dee85e", "sighting_of_ref": "indicator--f10305e2-da27-4ee1-b3b8-dbd6420bea6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4185d7-6312-4950-9fe0-8164ca600eb2", "sighting_of_ref": "indicator--243e7558-4dd7-43ac-915a-dc510a944d08", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb99bf9d-5245-447a-b37d-7cc038dd8731", "sighting_of_ref": "indicator--c0702af0-47de-44e3-9027-d0205ac75228", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a11c6f-ab78-4823-8cba-9bf849007d6e", "sighting_of_ref": "indicator--58df10e4-fb71-472a-9dcc-9302ea983964", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482268e8-a68c-4dd1-9813-108c0b115c94", "sighting_of_ref": "indicator--9dd948fc-1955-4d60-a100-398f4f29399d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9f8d6b-7b7a-427d-b46a-701cf05d95d2", "sighting_of_ref": "indicator--1ab22ba5-04b6-43e1-8c4c-d5b2420e2617", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aa9ef0-b51c-4737-a00d-5915287b0bea", "sighting_of_ref": "indicator--3837aa7c-d24e-44eb-b525-2390ebc067ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99043863-8996-4d24-8724-2c71b6648071", "sighting_of_ref": "indicator--bedab456-bd60-4b21-9795-e4e24ca368fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548b1594-e9d1-4cb9-a020-c725e25f4f70", "sighting_of_ref": "indicator--63a24da4-ac6d-42c0-aa25-43a28cbdbfe2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0630158-cb33-4196-a43e-2a865eef849e", "sighting_of_ref": "indicator--39cdefe2-c4e0-4578-b508-1bfd519f0b74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e66c29-a4e7-401a-a0da-345b9f341a7e", "sighting_of_ref": "indicator--ad09f540-5b5a-4d0f-8edc-78f80922cdfc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f739fd8-c944-4e40-a644-e619512535bf", "sighting_of_ref": "indicator--9bfc753c-b554-4130-a40d-f61ea3b37039", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffca1fa-1f95-40b9-ab13-f4a62a8b41ba", "sighting_of_ref": "indicator--b73e8b0a-cb54-4824-a7b1-f417d3163e20", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d6a978-d9ce-4e8b-8f27-c39c93a51716", "sighting_of_ref": "indicator--8f1c54eb-4dfa-4bba-bb9c-34dc13cb0cb2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf54722-3bd2-461e-a361-a53ae91bed6e", "sighting_of_ref": "indicator--892366d4-3257-4b43-b6fd-19b9da53a099", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a66564-784a-46aa-8517-07b23c9700e3", "sighting_of_ref": "indicator--1423a64e-3251-448f-82c1-74b15e6d5750", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2579e9-6115-42e0-bcad-68ebb98a0956", "sighting_of_ref": "indicator--9ccdd98d-af9e-4178-9fc7-9f6703a99655", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19af1821-a851-4bd0-82c9-78f182709762", "sighting_of_ref": "indicator--0046dbc0-1624-485c-8bc5-2bb524035dbc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9bab29-3760-44c4-aa59-294078d36c7c", "sighting_of_ref": "indicator--8901d9c6-2010-4c5c-823e-4691ef9b2c94", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bf7fbb-ace3-47ca-a5f6-47fdd4472ebf", "sighting_of_ref": "indicator--bd053bff-4bd6-4303-8bf0-c0bd07d4dc43", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd78d82-9d06-4802-814c-cec042f3af23", "sighting_of_ref": "indicator--86a0cc97-f1e0-4a97-930d-8d61010440a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f24e031-d2bf-46ab-8a6b-afc9c4e69e5e", "sighting_of_ref": "indicator--2bab872a-b6a3-409b-94cd-3f41bdc11432", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf229f4-9ada-4211-9454-1c9a5b0f1952", "sighting_of_ref": "indicator--10227054-6033-45f2-96dc-e54161fb0823", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dc998e-0421-4e0b-9ebb-a9c44e2860dc", "sighting_of_ref": "indicator--96484f8a-af8c-4a94-8c5e-5ecef6f78306", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08a99b2-323d-4752-80ac-7b1f00e1c42f", "sighting_of_ref": "indicator--48e6208b-3f5f-4ef9-9daa-eec59345fc6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dadbbc1-08e8-4814-8911-f5c43ae880e2", "sighting_of_ref": "indicator--e8603fe0-7a1c-4897-969d-289cfdd63fe8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431b6855-cf01-4846-bcdf-8b5259468a53", "sighting_of_ref": "indicator--12c3e010-f46c-4499-8a28-cf74c8efb888", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e4e7c-94ea-4d52-bae8-07f15da22967", "sighting_of_ref": "indicator--34fcdcac-79e2-461d-8001-00e2e62506e7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aafbec3-cd0f-4b88-93d1-f0c7a1c23bb0", "sighting_of_ref": "indicator--f3cdee7a-845f-4618-b627-543da75d1819", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77089f17-e288-4651-9eaa-140646f5653d", "sighting_of_ref": "indicator--8dd5e803-7942-4fba-a25d-5783bb7befb1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd18a31-6e63-4f52-b4ef-c395bcb9cb11", "sighting_of_ref": "indicator--5afe40f7-6422-4f00-8d82-8f59e137edc8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045635f6-c180-42cc-9060-968af89fedf8", "sighting_of_ref": "indicator--70954dec-38b2-4b8b-9fd8-eb0cd815a87e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c439eb-ac49-475e-8e85-d5794934be4e", "sighting_of_ref": "indicator--0518a938-3566-43e7-83d9-a1d47384fcff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e599a76-b727-4535-8bbb-f8b831fc9f4a", "sighting_of_ref": "indicator--b8a4363b-e6b1-4b24-a0df-3a3e1af33a7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95bd4b4-c458-4b83-8053-11046b9b1dbb", "sighting_of_ref": "indicator--2e465552-f2d5-4872-9348-b6d3f88ebd82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7a5236-7df6-4c9a-afe5-aa3c5a6084d1", "sighting_of_ref": "indicator--9ef61f83-2570-42ee-a830-69a32be9f448", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6662c3-75ad-419e-b774-9c72c471bac8", "sighting_of_ref": "indicator--e7c79a19-6548-435e-b57c-2770f789f072", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a96136a-6908-422d-a508-7d3965b464a0", "sighting_of_ref": "indicator--a6839a21-6c93-4e9a-9dfc-5c292308c53f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734696bb-ed11-4ee3-bac3-8b33610084cd", "sighting_of_ref": "indicator--c4ec02f2-a5b7-4cfb-9f41-1a619b5bcf1e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ddbd3d-7a54-4e66-94bc-f9c9a2bbe29e", "sighting_of_ref": "indicator--298de14c-707b-4bbb-b93e-cf025bccf211", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c3f561-245d-4353-88ef-b02535dabca2", "sighting_of_ref": "indicator--58d1df88-86e5-4e58-b7a4-ad92721fc0af", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a7a944-2e5d-448a-b5b8-e0c5db64c408", "sighting_of_ref": "indicator--c0807c8e-038c-47c7-88a0-073a64987117", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42190959-ac57-4852-bf56-8655adbeea81", "sighting_of_ref": "indicator--7b6b38b2-2beb-42fe-8293-735f8dce6ee9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413785fd-f3ae-4014-9dde-4048a17534fd", "sighting_of_ref": "indicator--32d8be79-4a3a-446b-9227-0f31b4b35dd6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e5e7a0-db5a-4750-813b-5d44aa79fac6", "sighting_of_ref": "indicator--dcb415fd-05ed-4625-b547-09de128301c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38d19ee-aa72-4963-b265-a6eea07737cd", "sighting_of_ref": "indicator--1f37c3a1-7c9b-4d4f-b020-ed774bf0441a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6342dde2-015e-40f1-a47b-ed4cfdf7c518", "sighting_of_ref": "indicator--a34eef76-7c2d-438e-87ec-451ffb62e0d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e095250-ad38-48ba-b0d5-b4216d5da1a4", "sighting_of_ref": "indicator--dc76415d-9cab-4342-b293-c044bfe47a74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2765103-f2f3-4b14-bb1e-1b120d6339a8", "sighting_of_ref": "indicator--3adac806-c615-444f-9c4b-952ab603f954", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b42fee-1540-4bd6-b375-7c2de2d98263", "sighting_of_ref": "indicator--99ce1c1d-b00d-44a8-a2f6-31d7f10ee239", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e868c8f4-9cdd-4435-b7b2-e088e48f41f2", "sighting_of_ref": "indicator--dfe5a69c-0d5e-4cdf-b1be-90442d4a2b17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b23a06c-38e1-4904-b729-e83f7c1e5be6", "sighting_of_ref": "indicator--6e5b473a-8220-4e0d-83b6-335625c9b8ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c887893-a9ef-40c2-8b45-6eb203b3f231", "sighting_of_ref": "indicator--a9a7f903-c2d8-4f5a-8de7-67609b6955ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca7f657-ce0c-4058-81cb-6cbce3c2f218", "sighting_of_ref": "indicator--d662b8f8-6831-4f22-90b6-32ed6f628eb2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb26dbb-e6a8-4fbb-b5a8-48cf03d25ac1", "sighting_of_ref": "indicator--490eeca6-b307-41b4-a2af-210a234a9a80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476eca02-22d7-4dab-bd2f-08cf85b84c42", "sighting_of_ref": "indicator--9ccfdd04-111d-4fc8-9977-bc8a4497ba36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd086d3-e0f5-461b-8360-29fa997acfa6", "sighting_of_ref": "indicator--0af9cb5a-fb83-4bf7-91c1-7ab88e0f7ea8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0531ce58-e442-436f-9607-59f570ec22bf", "sighting_of_ref": "indicator--222f9ead-dbca-4b55-832b-0cf2632e47bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241ac21d-7eb8-40d8-a3f9-23f5ce561164", "sighting_of_ref": "indicator--edfb98b0-1f39-4b99-9540-026cebc4eb5b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e0cbe7-2826-44b7-833e-611e5027b4a9", "sighting_of_ref": "indicator--bec442fe-540c-4ad5-b8ae-0ab82049d580", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73526a2d-548d-41a2-a7fb-880971d6e917", "sighting_of_ref": "indicator--9f9d271f-b115-4df7-b21d-372a823f1143", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8813359-dc7d-483e-a768-4b4b55786ae8", "sighting_of_ref": "indicator--85233164-83a2-4b8e-8097-33961a5a3275", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e198a9-9714-47cc-a0a7-a2362b209b9b", "sighting_of_ref": "indicator--4610c562-ae3d-46da-9c44-778d982e66c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d9e88-224a-460a-b60c-1f02c72687f7", "sighting_of_ref": "indicator--467cf936-be44-407c-9b92-cc915a3234be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cbf86b-109a-4ac0-b7b5-3d5a5df7bd59", "sighting_of_ref": "indicator--00ac76d0-35b9-4849-b028-5d3e850009a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c247fa-5b45-46db-acc0-a55cde045971", "sighting_of_ref": "indicator--32dbbde8-4727-4c0e-b0fd-fb03edf09ab8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5cbd34-6193-4a9d-b0ab-035a4e754feb", "sighting_of_ref": "indicator--ba3c68a1-333e-4753-8f1d-ee25f6fabecf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf030f89-001f-4046-9863-3682834b70f0", "sighting_of_ref": "indicator--78a2c9d4-f3c6-4a86-8ef5-f082aa8deaaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fde7138-9fad-4185-922a-5d7c7df58e72", "sighting_of_ref": "indicator--f432c129-92f6-4604-9ef5-21e93501940b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf53fe41-35ba-4548-a79f-c356dcf20055", "sighting_of_ref": "indicator--da72dd09-9b42-4e9e-b190-73dc0636a497", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8268d536-f351-49d4-af83-d111bc81b921", "sighting_of_ref": "indicator--b22f2072-4d2c-413c-82de-290d8b53cc34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e249724e-d21e-4bb2-984f-9f7ccfe9d076", "sighting_of_ref": "indicator--771bb793-59e2-407e-ba16-589146cb8652", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60106e3c-cd50-4232-ae7a-73645ea4a0ae", "sighting_of_ref": "indicator--81e8b554-d564-4648-bfbe-92b81766b487", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035511cc-35c9-4362-a9e9-b9c49529df3a", "sighting_of_ref": "indicator--70b953e3-118e-4395-856e-26bf09e7abab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82091f5-e66c-4e86-af0c-67f71ad824a1", "sighting_of_ref": "indicator--affcd04c-f3ce-4101-a3ff-9ac2527bcf33", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7082d29a-7726-48f4-abd6-a3e7cfe602e0", "sighting_of_ref": "indicator--8291499b-7e49-4647-b0a1-8363be2c29a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71614a23-80fc-47d3-a421-fe03e69b4e2b", "sighting_of_ref": "indicator--b5e32d0c-7e23-44e3-955d-4333dd37d9cc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c5ce96-8920-48a8-b50e-cf71cbfb21cc", "sighting_of_ref": "indicator--b5e32d0c-7e23-44e3-955d-4333dd37d9cc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8ea2ed-9285-4436-9098-2d43ec6c30fa", "sighting_of_ref": "indicator--ff862bcc-fdf6-42f0-8dc1-298252847222", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8394fdfc-44a6-4b6b-bb21-b5f0141d442f", "sighting_of_ref": "indicator--89a19001-6fd9-4cea-92f0-d163c53362c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb78ba0-f45c-49c4-8818-0822de4e09f7", "sighting_of_ref": "indicator--ca0289da-a632-450c-a90f-6821685c8ddf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c3e834-7d1a-4056-a22a-379e22374e87", "sighting_of_ref": "indicator--051adb04-9939-477e-b5c4-d52555c69ee9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb4558c-4440-4ecf-bd9e-b4400674bddd", "sighting_of_ref": "indicator--c6ea66d1-7d1d-4909-bacc-9b5151732296", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5557cf-2cf1-488f-bb41-6ed1d76b065c", "sighting_of_ref": "indicator--de3df910-b0a5-4ca6-9b8b-5b64ddea2d05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241322b4-c87d-44b5-ac93-5e7629cdb56a", "sighting_of_ref": "indicator--6f072bca-edff-43ad-8289-d2881fe5e785", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082efb9-c080-4825-b049-9b06fb1cda9a", "sighting_of_ref": "indicator--dd9f671f-7990-429a-844a-80a2b44ec294", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceab99e-821f-4916-888c-45ba31c968f9", "sighting_of_ref": "indicator--9d17cc08-a5b1-446e-abb7-ae9a443b2dcc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e688e8f-ca39-4f76-9930-5adb5ac8ac7b", "sighting_of_ref": "indicator--d5aa4c5e-cdd8-4606-8d40-f4092504c0bd", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84df57f-9004-4c94-b569-2ad2cad17af3", "sighting_of_ref": "indicator--48373556-4cfa-4a80-9101-b27a84eaff60", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dee07e-ef90-4ba0-9300-f5c3c68bcd7a", "sighting_of_ref": "indicator--cb7c947c-70cc-45ac-83a2-6556fb0ad1ed", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf38bf3-a0d5-4aad-90ef-ef1b566cd68b", "sighting_of_ref": "indicator--9d762034-9430-444f-8c65-b8444c74e48c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05ce81a-06a7-47d2-a9aa-7352dedd3236", "sighting_of_ref": "indicator--89874631-bd27-43d7-8b49-4491ec643653", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ad6915-83bb-484a-bafb-434ac21032bf", "sighting_of_ref": "indicator--89874631-bd27-43d7-8b49-4491ec643653", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c710ed99-3ab2-4635-9613-a629a73f002c", "sighting_of_ref": "indicator--af0d331b-dd16-41c3-804d-3464b112d1a0", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56398549-40a2-49d6-943a-1326a40cfeeb", "sighting_of_ref": "indicator--af0d331b-dd16-41c3-804d-3464b112d1a0", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5f9af4-d252-4114-b7b4-b4db8eb157ef", "sighting_of_ref": "indicator--c0614492-86d2-4e5c-a78b-04bd70b5a68d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f5c186-4c5b-46e1-a6ff-128c113d245f", "sighting_of_ref": "indicator--c0614492-86d2-4e5c-a78b-04bd70b5a68d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca23811-b64b-464b-8b4b-86b292c87f01", "sighting_of_ref": "indicator--2080356e-9a21-4001-ada2-32bd3cc4e779", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b16efb-78a9-48df-a7fd-fbcad9bfdf3b", "sighting_of_ref": "indicator--2080356e-9a21-4001-ada2-32bd3cc4e779", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d13d5c7-fa9e-4b53-9efe-92d89541f5ad", "sighting_of_ref": "indicator--eb8ff553-f6cc-4e93-9b1b-2a825fa3be14", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e738484d-1a79-40c3-abff-14ee086f9d77", "sighting_of_ref": "indicator--eb8ff553-f6cc-4e93-9b1b-2a825fa3be14", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0488a6b-2cdf-40c1-bb71-de1c8f311161", "sighting_of_ref": "indicator--5ca7321b-6826-41c8-a130-242e8a89199e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1b9ce7-ae90-454d-8d2a-b5a539f7e56b", "sighting_of_ref": "indicator--5ca7321b-6826-41c8-a130-242e8a89199e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bd2136-6db2-4868-87e9-77a3595cf9d4", "sighting_of_ref": "indicator--059705a7-557e-46db-aa61-d6078b19445d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97bb18c-05d7-4f1b-97ac-7752c177e056", "sighting_of_ref": "indicator--e9da34c8-2959-43b3-82c9-68022f8c0b0b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fa8d96-94fd-4be6-a10c-af0ae51c38cf", "sighting_of_ref": "indicator--e9da34c8-2959-43b3-82c9-68022f8c0b0b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e69ad-2788-430a-b090-7b1cff9a6787", "sighting_of_ref": "indicator--4cd450bd-3f00-43bf-8ff6-b695bd8f6060", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf36750-c006-47d6-979a-41aa60b0ad4d", "sighting_of_ref": "indicator--4cd450bd-3f00-43bf-8ff6-b695bd8f6060", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec0dc8f-e5ae-4d7e-bd63-6a5b1b2760b7", "sighting_of_ref": "indicator--51a2fe63-d3b7-44f6-bafa-9ae7f2963330", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4f1721-327b-4d16-81b7-d164b100d8c3", "sighting_of_ref": "indicator--51a2fe63-d3b7-44f6-bafa-9ae7f2963330", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254a8ce4-2074-4432-aaea-c00a104767f8", "sighting_of_ref": "indicator--fbd7bb21-7fd8-4add-b1fb-b806bdce593d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c929423-24a5-4228-a061-13928a05f604", "sighting_of_ref": "indicator--fbd7bb21-7fd8-4add-b1fb-b806bdce593d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072564aa-040f-4b74-9fcb-ffdae34f6e2e", "sighting_of_ref": "indicator--219fb4a1-2193-42a7-bd21-a9a982937c29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc74a7fb-d568-4c67-a354-bb5cc6da0a84", "sighting_of_ref": "indicator--bd83a6e4-bd7c-4c70-afa4-2cbf7869ef55", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76db18d4-7d0a-4177-bbdb-9597b50bd5c1", "sighting_of_ref": "indicator--f695dd3e-87a1-426e-9a3e-9c21eb990129", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50b0de0-aa5d-4081-85bf-841ed53b2275", "sighting_of_ref": "indicator--b83a28f4-951b-4cba-aae5-bbacf1d07339", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e954e945-4fb2-45e3-b77d-75d1ca69eb47", "sighting_of_ref": "indicator--ad207693-4216-4a1b-9001-752c368786c4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765fecb3-eaf1-47c7-9254-6eb45d54083b", "sighting_of_ref": "indicator--ad207693-4216-4a1b-9001-752c368786c4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91082f3f-8bcc-42a0-91af-4358e6528ced", "sighting_of_ref": "indicator--750e7119-183c-4248-a787-9f205a6d5d34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39213f06-2c41-4f1a-b203-2fd2c0333999", "sighting_of_ref": "indicator--4274ba00-b83d-4342-aa51-ad44b60cfe25", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76451f8d-2a97-41a9-a298-4a1d616104cb", "sighting_of_ref": "indicator--4274ba00-b83d-4342-aa51-ad44b60cfe25", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e22ede-7485-442a-8486-98f475a26625", "sighting_of_ref": "indicator--62316370-dbaa-4aef-b4e0-d79b04e370d7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a16e26b-e213-4a22-aa5d-496220dd3028", "sighting_of_ref": "indicator--62316370-dbaa-4aef-b4e0-d79b04e370d7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ba545f-3bc3-404f-a59c-7f4cb997eda2", "sighting_of_ref": "indicator--a86671e7-7c5d-4008-adb9-4aaabad71c0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bc643d-07a5-4341-869c-4ab915405849", "sighting_of_ref": "indicator--37038321-ed67-4be7-9acf-400d0fd84309", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232cebb-3422-4238-9ac8-fc3d3162ab01", "sighting_of_ref": "indicator--b558cffa-a0ca-4d34-a8d3-28db6336b48c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9f281b-fbc6-4020-bbf1-5539301cc8fe", "sighting_of_ref": "indicator--742b7db1-3b64-4f2b-92df-e487e9d84ea2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e77cad-24f6-454c-a1b4-e8f00e9259d6", "sighting_of_ref": "indicator--999ab091-8b98-44f5-a4c4-2e335be1fc62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06609b9-982d-4f65-a150-e0e13840bb1f", "sighting_of_ref": "indicator--fd6ef23e-c171-4353-903d-e878a7058506", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d52f9d6-5b3c-496c-8945-d45169334e1e", "sighting_of_ref": "indicator--382d242a-7095-4e0f-b57c-86ffc282a21c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7762092-4e31-49b7-af46-3f4f6e60e1fd", "sighting_of_ref": "indicator--dc8f2ac9-6fdc-4998-81cc-681ddcd5b783", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a9cfaa-40e1-42eb-a3ac-41f45978b335", "sighting_of_ref": "indicator--44e7ce0a-9ddc-4ac6-8e5b-94724135d7b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd86870a-6ba5-483a-abc3-398a45398950", "sighting_of_ref": "indicator--a3767a99-26e0-4dfa-b95d-ced658291c2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c7fc14-0887-486d-a0c5-9ecfb0399fc2", "sighting_of_ref": "indicator--05f468d8-de81-4e45-af81-570a7725ba52", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b645f7b5-b463-4615-9aa7-16ab67479617", "sighting_of_ref": "indicator--f0138575-a732-411f-97f5-3aba3f614356", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8618a4f2-846b-4abb-bf1a-c85fb61c3d64", "sighting_of_ref": "indicator--e1224330-7037-4776-aeb5-85a749b7395f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba329edb-597b-45f2-8fe2-aeab0480a070", "sighting_of_ref": "indicator--0d1d1c94-56da-4557-a5e9-d516d1b5680d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735042dd-3d40-4ede-a321-ea3c2bbd1c9f", "sighting_of_ref": "indicator--120cecb8-31fd-430e-9263-46d3ffe45edc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9e608b-87e1-40c0-b08d-cdb2b2780b28", "sighting_of_ref": "indicator--9b0777c6-8c81-4c89-b4ae-f508d3339946", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddc991e-60b8-4de4-8e65-65e347165ec9", "sighting_of_ref": "indicator--7a6b3444-0d8f-4cf4-8e0b-99b7ce8f7e48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8622de-4f7f-40ec-bde3-57d58a18e518", "sighting_of_ref": "indicator--5c2d504e-619e-4da9-a5cd-97d413e8af1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520f0eb0-46e4-4bd6-b7e0-c38562728dbb", "sighting_of_ref": "indicator--eb9dc89e-2787-4351-8de8-ffde5640b730", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a1e469-8ca4-4a56-a1ef-69a5dee2cd65", "sighting_of_ref": "indicator--ed3f4d55-c10b-418e-983e-6e3e3e756504", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0045c230-ee1f-4b96-ac15-726931a23aaf", "sighting_of_ref": "indicator--aba94164-2d07-444a-b103-0d6f989a14d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb3ee40-36d6-4f46-ae7c-7ce1a510c99f", "sighting_of_ref": "indicator--42d5e594-7fd0-4a1b-8f61-6e5ac2f612f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac39070c-c3c9-460a-8b76-1b84aea9b373", "sighting_of_ref": "indicator--c790269a-3762-4b43-8cd7-920b013bd639", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25119e5-5aa2-493a-94ae-ca540c0f1ac0", "sighting_of_ref": "indicator--e15f97a2-13da-4b7e-885a-7cb054d1b80a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34676e1-c746-4aea-af53-ab095bb9c102", "sighting_of_ref": "indicator--925c8b3d-fafb-4934-8fff-2e7589e88ebe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fb6afb-252b-49c5-8fb6-c8b1c7c1092f", "sighting_of_ref": "indicator--7f89d292-ee34-485e-8827-541bcf8217ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8e7ca-2f6d-4ffd-9a8e-34178b199d82", "sighting_of_ref": "indicator--093bef10-be5d-49bb-b6c4-ef377243ba06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3691459d-8545-4b5e-a3a0-a8a74645da10", "sighting_of_ref": "indicator--0b03858c-59d6-4399-8a68-a5ab345acbef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f476fe-9ee9-4173-bdfc-ea21bdef27a6", "sighting_of_ref": "indicator--b050c50f-1d9b-494f-94a0-f2b9047dbd92", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52fc51e-9764-4ba6-b5f9-56d307824d1e", "sighting_of_ref": "indicator--fa79bc43-36ed-4ced-9568-9aeb1c18010b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1149aa-af4c-4ca9-a55f-035161f8ba89", "sighting_of_ref": "indicator--96790fca-251f-44bc-ad93-8c0ea25472c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66267fc-cc48-4a83-b83b-7c82a055f90d", "sighting_of_ref": "indicator--5d45f95a-7624-43af-a4fb-48ee3d37308f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d6a70e-5045-499d-afae-65ded03de289", "sighting_of_ref": "indicator--eab374c4-a9c4-48be-95bb-d81f0831767b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9736025-8f79-4a58-9a4e-07d63f8b8509", "sighting_of_ref": "indicator--e2eb07f3-ade9-4a31-bce7-ec0e4dd1f463", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397d7eb5-d6f6-4aff-9a3a-43ca13ed7def", "sighting_of_ref": "indicator--3983318b-2354-4b4c-98ec-73381b1ddefc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae26ece-5393-4115-a7bd-7a7cc979e002", "sighting_of_ref": "indicator--23b35e58-6c65-4cdf-9701-705dddd5476c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb7b21-a15f-4170-839c-c3c8282d146f", "sighting_of_ref": "indicator--829c24f1-4b9e-4840-b87e-3993fda5fd85", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a528abcb-d01e-41af-bbbf-3b9033830465", "sighting_of_ref": "indicator--c8cd1a7d-d783-4706-982e-a46779a69532", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48d822b-2c9b-4fcd-8201-987c3e5d7ad2", "sighting_of_ref": "indicator--9b0b0e22-787e-44b2-852c-c02e78603104", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82653dc-1dd2-4122-8bd9-b8167a3e4a19", "sighting_of_ref": "indicator--55b77c03-6513-4a81-8f22-cd6b271d68ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1527e9a8-7864-44b4-a9d2-881d1b401caa", "sighting_of_ref": "indicator--2a9a1747-4f43-4eb3-b22b-422850f9e64a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af266b9-14c2-44b3-93ba-a7420725868d", "sighting_of_ref": "indicator--4aedefcb-0e3c-4b88-bab4-408664e0036a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb8416b-fe92-44f2-899f-76d9501e9139", "sighting_of_ref": "indicator--7dad12d8-3023-499a-842d-79af55cb382d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22db489b-694d-404c-ab3a-5b4717a67c58", "sighting_of_ref": "indicator--fcb1d4dc-89e4-46eb-9233-315c2bb93098", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd79935-fcc1-4710-929f-d31c0884a4b8", "sighting_of_ref": "indicator--182cba30-4995-4a98-9d6f-ef3397b2d4fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c9a957-3b24-4a52-9b64-5f95e0dfc90d", "sighting_of_ref": "indicator--2c631207-b65f-4c5b-b872-69f04216a60e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9c2b43-ec4b-42fd-8d61-1f77010b0b7e", "sighting_of_ref": "indicator--1675e373-b830-40c5-af2f-50cd3f75631d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69cf035-41a6-491b-84a3-96bc9a746905", "sighting_of_ref": "indicator--73760491-6a5f-4b48-98bf-3c0a88a3ba5b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7dc8c7-e007-4c47-92ce-8dae99274217", "sighting_of_ref": "indicator--39776d18-3bfe-4302-94f5-89ada9410940", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a134cfb-6732-4399-98dc-842ee2990ca3", "sighting_of_ref": "indicator--8f17761f-00f9-4c02-9f41-16a9e0368a83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aab2305-d16d-45c6-900e-d60b71497297", "sighting_of_ref": "indicator--d79076c0-7a04-495d-9bc9-089bf80354e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57f74b8-e375-4063-8260-ac3915c26220", "sighting_of_ref": "indicator--3e21243e-b4a9-4bf5-a6df-8c52823206ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddfce90-8717-40d5-8398-35fe4bbdd54e", "sighting_of_ref": "indicator--9445bcc9-9ca1-4716-bb7f-e63a8a0676a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e56183-f092-4bf2-8e4b-35911f5db1d7", "sighting_of_ref": "indicator--03085fa8-0b5f-41c8-90fc-6abb44d3e2d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932539a3-cae1-4c2d-a11c-c7d7d251c643", "sighting_of_ref": "indicator--458398d9-21fe-4c51-a515-f9361b182fa4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29714d4-abf3-42fb-88e5-567d7b3ace24", "sighting_of_ref": "indicator--a981e269-2a75-45c5-88f5-165d47c510ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e886b585-e7c9-46f4-8424-ac4bb31ea052", "sighting_of_ref": "indicator--60c69861-44d2-4af4-9b09-76c19b8cc13b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788dc966-c028-4623-a442-7cc266dbd1b5", "sighting_of_ref": "indicator--79d5635a-77d8-4f97-9f73-a5e54e447545", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d3d378-1293-4046-83cf-5757af45527a", "sighting_of_ref": "indicator--f7a58581-9af4-4f90-b144-2d1f03a1b5ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942a7700-444e-4df9-9c64-46866feb39c4", "sighting_of_ref": "indicator--e64019df-606c-4a03-8ac3-b0467575c670", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09de8732-48e9-44d1-8f0b-6f49830c2878", "sighting_of_ref": "indicator--a98e8a2b-78a2-4a3f-b62b-136350319ffb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e07ee6-6940-4305-9956-c99f5234211f", "sighting_of_ref": "indicator--16fb540d-352e-4dbb-a871-b3731b3fe903", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7514890-ba8e-4ac0-bcfb-a46e3befda8e", "sighting_of_ref": "indicator--9c8d0924-0612-4f91-9d73-4b7d02b31af9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228c9b5e-6817-4721-aaee-4035b4c61314", "sighting_of_ref": "indicator--25678992-376e-4cec-9132-145dd67af418", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb96e4b-f81c-435e-a81d-ad47d1dc4981", "sighting_of_ref": "indicator--67ffa698-b1b7-4e70-97ae-1a036fa35a75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065f4b15-7b3d-4541-bf57-7fd86fe214d6", "sighting_of_ref": "indicator--3eba586d-e012-4e98-9c5e-e058c543e316", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae818984-bbdd-48eb-97bb-e898ed0d6d1e", "sighting_of_ref": "indicator--75337d83-9efd-49be-b27d-7b23f031a05f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e708f255-0ef2-4253-a5d1-8de9f14bc4a9", "sighting_of_ref": "indicator--ad29274c-99d0-459d-a063-3c487a4abb8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64b424a-af70-45b1-8af2-94980aa14c6c", "sighting_of_ref": "indicator--c88080dd-d8ed-4c08-82fb-0baf7499637b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474efd1a-3ed7-4eb3-ab78-64b23f4582a8", "sighting_of_ref": "indicator--38a1933c-95fd-4fa4-a73d-f6707b2b4632", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6311d966-19e1-450b-92a6-0387966b0ddb", "sighting_of_ref": "indicator--233372ac-24fc-491e-a1b6-ac78ec4fbb11", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d27071-ac19-4a87-8f0c-dcb13fb115f6", "sighting_of_ref": "indicator--c26c3029-e337-4d5a-b509-4e055e49eff4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b335096-13aa-4447-9087-ae0f4fc38e06", "sighting_of_ref": "indicator--8d7fef13-8f2c-4ebe-a2dd-2cb003b39702", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215dd947-91b5-4959-83bc-e1e65376c815", "sighting_of_ref": "indicator--4cb2d91b-1475-4548-af6d-1ab9170f8e6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a30a7d-a206-46af-a4bc-446f9b723a10", "sighting_of_ref": "indicator--33c64714-ec29-4aea-8d54-11f1352be4ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9aad57-8e4a-4e67-8652-d38ac6c99eaa", "sighting_of_ref": "indicator--547d71ed-9e5b-4bef-9169-5c8ac9d4bd49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dde192e-ec56-4c5b-8fc0-e010ebeca9b0", "sighting_of_ref": "indicator--8efb3506-dcbf-48d2-a10c-22534827e3c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e2facb-b072-41cc-86c8-3b3d45577328", "sighting_of_ref": "indicator--b93c4e1b-f0f5-483a-95fb-d0a5c4f6a2a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b92bc-c4a3-43ab-9338-d53c67a35a35", "sighting_of_ref": "indicator--a3d88c64-e7c0-4f41-b290-bd65b3594dfa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f5f6b8-5395-4acc-8709-f428570c233e", "sighting_of_ref": "indicator--0204e8d2-9137-464d-a001-376a512b02d3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c0b07-0748-4815-a598-8e6a7b2cafd4", "sighting_of_ref": "indicator--5f2ff235-47e0-4e1f-a1c7-948e8c733447", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a08b01-72e6-4b14-bf55-371cee331eac", "sighting_of_ref": "indicator--fa485804-3d3c-4287-bab5-21929e405d3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74ad138-40b0-4611-bbda-2b2ea572c560", "sighting_of_ref": "indicator--9f514b9c-1747-4d7f-adec-85a97ce496bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7251a091-3dfa-4463-bf21-6773d665fabf", "sighting_of_ref": "indicator--3a30ca82-3169-4596-b68b-d7605820e0e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fdd362-379a-4ac9-8c3a-b78f22201d1e", "sighting_of_ref": "indicator--db819d2c-d5cb-415f-af12-198c477d0978", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac4b53-a95a-4732-a860-3d5d3b200905", "sighting_of_ref": "indicator--81a21683-1f5c-43e7-85f3-fd5433a26c3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92402c2-7ea5-42ec-bfdd-10a6f0730ba3", "sighting_of_ref": "indicator--a3639304-965a-4327-8a18-661868569dbc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4c174-12ef-4238-a9b0-bdb22f255596", "sighting_of_ref": "indicator--a3639304-965a-4327-8a18-661868569dbc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b5b815-a170-441b-a933-6b1963fcdd39", "sighting_of_ref": "indicator--0270d255-9995-4b40-bf72-8e8bce25a343", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b81fe54-6a8e-42ce-86a8-b5f61fb8e8dc", "sighting_of_ref": "indicator--0270d255-9995-4b40-bf72-8e8bce25a343", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26002628-1fbd-451b-b815-6e764ccc5180", "sighting_of_ref": "indicator--772e24cf-8bbe-445b-96e4-90033c088dc6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563e9506-c895-4087-a101-cc89fef16117", "sighting_of_ref": "indicator--7520fb89-4be9-4bed-a793-8321c98b318a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b02ae61-93df-44da-acf1-a2763bf95aef", "sighting_of_ref": "indicator--7520fb89-4be9-4bed-a793-8321c98b318a", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cf8b88-ab8f-4cde-804f-3c64a417bde0", "sighting_of_ref": "indicator--001b5e67-cb01-411a-8daa-b9eb8a4d4a20", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee947bc-9e85-420e-b55a-bff8f92668a2", "sighting_of_ref": "indicator--001b5e67-cb01-411a-8daa-b9eb8a4d4a20", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb30ad5-a825-4762-a10d-4bf6e371f889", "sighting_of_ref": "indicator--51a7c94a-ad7c-4339-bd6c-b62570544f97", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265a2526-93e1-4d79-9f21-a0a025e28814", "sighting_of_ref": "indicator--51a7c94a-ad7c-4339-bd6c-b62570544f97", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a5d96d-52e9-4416-bd3e-4ee9cc7c43a5", "sighting_of_ref": "indicator--d1030975-2708-4b19-ba71-8f01385c0d86", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e56d39-ea59-4e11-b7ce-4b6963254d92", "sighting_of_ref": "indicator--d1030975-2708-4b19-ba71-8f01385c0d86", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cad9c7f-621b-4889-be86-8351d8617b29", "sighting_of_ref": "indicator--af072d1d-1c09-4735-9ef5-f2a64ba187f4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5586aaee-4619-4b18-a3b0-df6143f45c41", "sighting_of_ref": "indicator--af072d1d-1c09-4735-9ef5-f2a64ba187f4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e70339-d115-4acd-9456-27291813c49a", "sighting_of_ref": "indicator--370b1986-41ff-4048-8211-b5ffcdabc77f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2c8d89-1de8-4661-bb8f-0bee3d318e5a", "sighting_of_ref": "indicator--370b1986-41ff-4048-8211-b5ffcdabc77f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bccde24-8570-4840-a519-71cfa909e67b", "sighting_of_ref": "indicator--69cfa5bd-6fdf-4f14-8185-c0d61bd283db", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e8c901-54a8-41a3-99e9-3e0ce45b93f9", "sighting_of_ref": "indicator--69cfa5bd-6fdf-4f14-8185-c0d61bd283db", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872d31ae-56b9-4ea3-811c-15e2c2818c4e", "sighting_of_ref": "indicator--d59ff74a-8aaf-49d9-913e-850b4b90fe2c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149e1df5-dc46-4877-a43b-bf61b9f032fd", "sighting_of_ref": "indicator--1c0f9d63-240e-4e60-81f1-25b1870dda7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e5b0eb-e792-49af-b3ff-55a611d2090f", "sighting_of_ref": "indicator--8b6e64f4-fe5a-4db5-86e7-91fdeb7d8f32", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4519e047-f1a4-4b1f-8364-294447b9f605", "sighting_of_ref": "indicator--e6c25189-b8e3-43de-b73a-63f6aca7b3de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d955212b-3378-43e6-aca3-7a40c127cf72", "sighting_of_ref": "indicator--ac942e80-2e1f-4488-a9bb-2acc46f7b372", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95667818-efb3-43ed-96c2-61415e4c4b33", "sighting_of_ref": "indicator--13bb0d25-a447-4d5e-9740-a1adf3f5b7b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efabe0d-7883-4f89-850b-7acfad85b969", "sighting_of_ref": "indicator--c056ca80-01c6-4da5-9a79-f0d93094b80d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49d60e9-f139-4fdb-b833-e399086184b3", "sighting_of_ref": "indicator--f6fdea04-a7f4-44e6-8f20-41abaf470784", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be46097-6423-485e-9a38-ebe6426f65fd", "sighting_of_ref": "indicator--b8dd6e76-d7ee-4b41-9d42-f0bede818f3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2596581-bcc4-4753-a8e4-d9b798d09446", "sighting_of_ref": "indicator--27e8bf42-b959-4c46-b13a-953629a6676f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9017e2c0-6609-480f-875f-f0800f4c4f3b", "sighting_of_ref": "indicator--d80f30ee-c706-4418-b87e-053f234eee73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a881f8e-0670-4591-8b9c-f245ce62fd4c", "sighting_of_ref": "indicator--7df3aa4e-b856-43a8-887c-1819cee35d46", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c1d873-a03b-4d54-81a6-c0cad9c50c0f", "sighting_of_ref": "indicator--7b937ac5-0201-4705-93a8-fde245df6180", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b83467d-9594-4f21-8b34-82513f50c05e", "sighting_of_ref": "indicator--b901d182-9fd8-4c84-ad58-35077bca0322", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1f4870-4901-48c1-b3f4-51c8763bbf34", "sighting_of_ref": "indicator--286e62bd-847e-4b06-ade7-4096b52434f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6b5283-6db1-4acd-9b9d-b1751d581ab0", "sighting_of_ref": "indicator--57ea3aac-af37-4a53-b0b7-9d20604ae2ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f3b957-841d-412e-bb14-63ef728ca4fe", "sighting_of_ref": "indicator--3aebb9f0-de24-41b4-8fbd-a95aee9a614f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37a1fed-5d4f-4043-b0c8-5e57c4100bb0", "sighting_of_ref": "indicator--39d4fb1f-770b-4f78-9f0f-3ac5a1b73519", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab667af-b602-41f3-86d3-53a151bc68a2", "sighting_of_ref": "indicator--f6392c22-88e8-410c-9181-e44b9d374942", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a76306-6a06-4758-8dfd-b804ad119439", "sighting_of_ref": "indicator--170307fa-1150-45ce-9daa-598bdcc83736", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744bbb9d-0166-4080-b8c8-039356945fad", "sighting_of_ref": "indicator--9be69603-32cd-4338-8714-eebf69725325", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fd2211-2740-4caa-bf49-7bd8cf4f4da7", "sighting_of_ref": "indicator--fe4a5d92-fc30-41d7-ab94-746172eca62b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb6601f-b3d9-4ca9-83a6-a2db37ae3b7f", "sighting_of_ref": "indicator--5b9a00f7-e086-4679-a46a-aae189ecb3a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0eb8c5-f734-47f5-bf62-70f675fa76d1", "sighting_of_ref": "indicator--f710ece6-befe-4d72-a467-5eb98c416b50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e238b984-8b81-4f88-8d9a-49937a00513c", "sighting_of_ref": "indicator--b788e5f0-c47b-429e-8c0e-6b2c962a3043", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a0f928-e6aa-45be-9087-c573926b47ad", "sighting_of_ref": "indicator--4d1921f0-b493-4a6d-a136-f9cab392467a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b58b4f-dcc7-4af6-aa9b-6df51168a8d2", "sighting_of_ref": "indicator--05d29c7a-c947-4552-a323-67ccd5f271cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86d0594-23a9-4302-a090-af50a38b2583", "sighting_of_ref": "indicator--f0683f34-5d0b-487f-8cb9-ce99be927c45", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88587f83-10f7-4666-a0c0-2e8f5725188e", "sighting_of_ref": "indicator--fbe17648-ce4c-42ce-a66a-b4ae75e2bf2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e56d0a4-aa09-4419-8c3b-3e641dea1c7b", "sighting_of_ref": "indicator--8dfbc296-1497-4f45-b373-54e8d3ade3a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc07aa66-a328-4b33-9ce8-ec754bcd7c4b", "sighting_of_ref": "indicator--3ada0909-bc1b-4c2e-b319-70237902e132", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a289983-1d93-4247-8fb2-50c370aeb486", "sighting_of_ref": "indicator--adafd826-e52b-48b7-88f5-5f7fb8ab2d61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c832124e-9f8b-48b6-8e59-8e61cb35eb29", "sighting_of_ref": "indicator--81c19bb4-7d8c-4946-a483-9cba17690721", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6486dde3-c588-4265-ae48-c037f8b39641", "sighting_of_ref": "indicator--b3894ed4-5d79-4ab1-887a-15b6c1c41f60", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fdc13e-35f5-44ce-8408-e6daf17a67a7", "sighting_of_ref": "indicator--959db207-180d-4f98-ac72-7f1cb8cb3bb6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7097b7-bfb2-4a8b-ae8a-b1b5ef6e9ac3", "sighting_of_ref": "indicator--bb2c85bc-910d-485e-ae79-ed763ae96ae6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a10bc7c-aad3-4873-a1f3-18719f7dd680", "sighting_of_ref": "indicator--6b20f515-bbd0-4fd2-bede-f9bcb7abb9df", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f76eb2-6cc1-4629-b623-fe2766cb4524", "sighting_of_ref": "indicator--d7ebd47c-b00b-4a6a-ab1d-5cff7455d2dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e3bf9d-de61-4c4f-8f6a-894ffb4a68b7", "sighting_of_ref": "indicator--c079bcfc-1406-4c4a-93a2-cae8c7890257", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279b7309-39ab-4f68-8e3f-649e8f87ce6b", "sighting_of_ref": "indicator--749a0dd4-f4de-4205-a586-3ce2de60fa4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7acfad6-cf74-4549-be32-73f10e6f99c7", "sighting_of_ref": "indicator--569c7c7f-d8af-4007-adf5-410363f23172", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6667b703-0de6-47fa-a737-1e1d25a00402", "sighting_of_ref": "indicator--3ae72bc3-1308-4902-a0bc-395b3a995a75", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727cce50-c5c3-46f3-9290-d7e8213ee10e", "sighting_of_ref": "indicator--2ddde653-b3bf-4189-8675-deca139f01e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79ace18-e2b7-4674-9cdc-9d58155c5dd3", "sighting_of_ref": "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e07c40-0884-44c7-b500-27ac1ac7392c", "sighting_of_ref": "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99ede5-dc5b-4af1-a779-8bf52986b77b", "sighting_of_ref": "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6caddc5-369a-4ebf-b08b-b7bf22246a93", "sighting_of_ref": "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae47f4a-de8a-430f-a3e1-8cef8792feeb", "sighting_of_ref": "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d8bc23-3161-4326-8baf-8ea887f490ec", "sighting_of_ref": "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70df0f9c-c867-4e02-953e-d79f163ff531", "sighting_of_ref": "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bd319d-8790-45ef-83f4-120065c03400", "sighting_of_ref": "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c875682a-a256-4026-ad16-facb03301890", "sighting_of_ref": "indicator--2a2d2f28-3923-45b6-9b3a-58ceed17533d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65551a01-9366-4c80-ada0-1d931ff72fbc", "sighting_of_ref": "indicator--2a2d2f28-3923-45b6-9b3a-58ceed17533d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342a667b-1de6-4f30-8868-ca7dd14b2c14", "sighting_of_ref": "indicator--2a2d2f28-3923-45b6-9b3a-58ceed17533d", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94629fb0-780c-433a-acbd-3783ba9401df", "sighting_of_ref": "indicator--91b87f25-6589-44cb-b629-5187c0844de0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88118c0d-42e8-4268-994f-47a800bfacd4", "sighting_of_ref": "indicator--5b8cf2dd-ab6b-400e-af23-d1aa26584a99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e12bd01-2d9f-403f-bb27-64a71e6830bd", "sighting_of_ref": "indicator--38fe3c9f-0ddd-4abf-9a7d-c841613d5c16", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246e5cc3-2342-4885-9d88-237989c86388", "sighting_of_ref": "indicator--441a662d-4f63-47e6-b4e0-d6e9385338e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11aa1d5-db43-4e33-8dd8-40081fda0f02", "sighting_of_ref": "indicator--85790de2-6539-4f8b-b564-d924250e999c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69debdd8-0b02-4a89-932a-bafae1db9722", "sighting_of_ref": "indicator--0386d4e5-3759-4ee6-9bbe-aeeb67a0becb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22776f9e-cd6a-4d53-b7d4-90dc49ceecea", "sighting_of_ref": "indicator--b0498baf-e564-401d-97bf-94744dd0a9ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8120379c-6044-45a5-863e-a06a000e3705", "sighting_of_ref": "indicator--062d137c-30c6-450f-a877-d8a253ac410f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e50f37e-b247-4fd8-99dc-6cba958369b5", "sighting_of_ref": "indicator--d3cb3833-a263-4230-a087-519711d27e92", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123fc5b9-e92c-4726-8424-acbc547955f9", "sighting_of_ref": "indicator--9b9a8a98-f024-4743-b746-97f95bd7d3cb", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8d7b89-3c8c-4c23-a2e7-26e8e48265a9", "sighting_of_ref": "indicator--8e53a362-f8d6-4ead-a792-ff9d1ddd7483", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc6b86f-3391-4f01-88be-f83febcca045", "sighting_of_ref": "indicator--4a233f68-1269-4ac8-99c8-d93edef2b598", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064fc967-1b6c-4f48-81e9-1c6c5e9f7b36", "sighting_of_ref": "indicator--891522f1-b6e6-45a5-ab24-db906e3b47c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d57a68-641b-4e98-a0fa-a0ae9414d5fe", "sighting_of_ref": "indicator--535dee7a-f314-4a71-824a-5a53a315807a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24262008-5f14-4fe7-b1ff-04e35ed7c4b7", "sighting_of_ref": "indicator--b1a0a00d-bc70-4f5d-b186-431d8fb238c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f06f58-ffc4-4fee-8b78-11131fc10aac", "sighting_of_ref": "indicator--0934cbc4-6e9b-49b2-b65f-c1ab486e2c18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9227a82b-2ef9-49c3-bdc9-a3bf09aabdf1", "sighting_of_ref": "indicator--90900a81-c538-4b19-b5bb-f90a62a51415", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd6e21b-a9f2-4dff-aee7-f521dc3ec1fa", "sighting_of_ref": "indicator--d4bd5930-ecdc-4bbf-b450-06a1f9ff2d08", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31118c1-c30d-4521-935f-15593e716cae", "sighting_of_ref": "indicator--73586c8c-3607-4c5f-b541-518ec8ab61ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c75e9a-e288-4ce1-8eb2-864065a5be45", "sighting_of_ref": "indicator--92c67426-17ec-437c-b8ca-de2632dd4f2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc3a504-5ae2-4d62-bf22-d3958831fea5", "sighting_of_ref": "indicator--dc70548c-c81c-4036-a939-bec53312c28c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b1fc7a-edce-4a58-aede-ac04c7045a79", "sighting_of_ref": "indicator--f5d9355e-9d78-4d30-ac20-89c28ac41abb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa13bfbb-7380-4dca-9117-9a9533d3ed79", "sighting_of_ref": "indicator--03db4a58-5830-4cac-9819-b1093cfa7fdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076563ee-4ef6-4e39-80eb-643c5fc3cca5", "sighting_of_ref": "indicator--5444a314-b70c-4e0c-95b0-ef8d2c08729c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda71a70-b893-46ac-9d13-7c53b1ae72e6", "sighting_of_ref": "indicator--01708783-77a3-43f7-9215-cfccd932cb51", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19b9f4c-fba1-4c16-a719-d64769884c08", "sighting_of_ref": "indicator--b3f35c86-4205-46dc-8d21-821b6199c6b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd970041-3bc9-492e-b84d-032cc0e59903", "sighting_of_ref": "indicator--70708848-b035-4fbf-90cd-e8a6680a86e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fa40f0-036c-40de-acba-7566fbbd0547", "sighting_of_ref": "indicator--8f0e2f31-0245-42db-a654-3e1a5266e8a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6917ffbe-0741-4426-b7a8-7c2c42c26884", "sighting_of_ref": "indicator--7f46deab-223f-41ea-8a1a-54794388e71f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8f06af-09dd-4731-aecf-034083f94e82", "sighting_of_ref": "indicator--b4e30ed0-db1d-4f1e-8bef-6bbeb2a8def5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da4ff8c-bb03-416c-b3c4-63fcc6614564", "sighting_of_ref": "indicator--9ec59f2e-af3c-480f-8274-432070b875bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6794925-005b-4a5a-8511-d0ad1eb7e105", "sighting_of_ref": "indicator--d0962af0-30ab-4634-84ef-fad43b68a0c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13789ca8-b4e6-4f25-b74b-873e9565be82", "sighting_of_ref": "indicator--2cf8b188-1c6c-47e3-b688-e4279d24e4d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d3eb45-f457-4c65-9c75-169b81e94183", "sighting_of_ref": "indicator--70b7f137-a20e-4b62-a616-f072c38eedef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5148bdc0-f685-421f-85ca-9a19b722ff46", "sighting_of_ref": "indicator--0ce1e7a0-1542-4e9c-9fae-988b291c9fe0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8eb486-7027-49ec-9edf-6ebcdaf39349", "sighting_of_ref": "indicator--bea2bfca-494b-4d31-b82d-2a1420b2cdce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eb3755-91fd-46f1-b435-dd4f0d60545a", "sighting_of_ref": "indicator--9b9169d6-aa75-4ab1-aa53-e9d672184981", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fedf917-8d48-4f40-9574-59ed195daaae", "sighting_of_ref": "indicator--0c0a1b17-72b1-441f-a2d4-7f2c1e5c0646", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0462de4-48c4-4971-9718-747a067f804d", "sighting_of_ref": "indicator--909a29a4-34d9-4716-a465-793a5855da09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4848ce79-9f7c-4806-a838-6fcfbf4c4cea", "sighting_of_ref": "indicator--550251ad-4201-4ba9-907b-5b6da540dcfc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb2f391-ac93-447e-9feb-373236f4a677", "sighting_of_ref": "indicator--b1e2ee4b-89c1-4036-9f91-8a7e3af9f14b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5316f60e-09d0-407b-95ba-bdeb7d31959e", "sighting_of_ref": "indicator--ae65775d-9b87-41d5-910b-0d520a1116a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3206b206-405e-4821-a767-5394210f8dd4", "sighting_of_ref": "indicator--9c5f7fbb-c4ae-40ec-98a9-1c8e97f93061", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432e4935-cbff-4809-bde0-a71933db594c", "sighting_of_ref": "indicator--c0c01d39-7682-4c19-acba-d0d88e471644", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2114fd-0313-4e89-9745-45054c83fbdd", "sighting_of_ref": "indicator--09100523-4a46-4b79-b180-592541cfb998", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0c7b8f-474c-422e-9146-5ab0724453f8", "sighting_of_ref": "indicator--765f3f10-a05a-4168-a84c-9fcb9e559b37", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae97f58e-c07b-4663-a17c-6e8f4f14bd13", "sighting_of_ref": "indicator--f89df5b2-6441-436a-95e2-168d41f87959", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6f4081-bcd1-49a4-a89e-03eff73a45ab", "sighting_of_ref": "indicator--5c59ffe7-6c3e-43d0-a2a6-c41774bac59a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566e8716-0f26-4159-a06c-376bf75c4632", "sighting_of_ref": "indicator--f1bc12e9-e7e1-4da2-9b97-8504df5d7481", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9b1c48-9edf-45e1-b168-de56affe02a6", "sighting_of_ref": "indicator--45c91d01-58f1-4e19-bf9c-c5c72d119875", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943a9c58-6245-4255-9367-dbd729143bc0", "sighting_of_ref": "indicator--0558a91a-ab84-4083-927e-961cc7b10ab0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7b32f3-1237-494a-ad5a-a71f480fac15", "sighting_of_ref": "indicator--0689f516-dda2-4663-a2a4-4d5ff83bfc5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fce3a0d-c962-4edf-92f2-42fe6bc4f07e", "sighting_of_ref": "indicator--dd04e0fe-8ab2-40e5-b262-a821b6905666", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d431e923-3af2-4c22-96b0-5de29da59cec", "sighting_of_ref": "indicator--d413199b-0df1-4d90-bb55-8b08e90b4180", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d6505f-f8de-4cc0-aafd-317c62c7d6ca", "sighting_of_ref": "indicator--eebf7328-0e04-44d5-82d4-042569a61dbf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89ea981-b57c-4e54-a73a-b1b566510994", "sighting_of_ref": "indicator--a666ce10-68dc-4b90-b40e-2b5f02c88cdd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108285ff-23ed-4350-b288-c9e7bfcd2515", "sighting_of_ref": "indicator--afc87585-10c0-4ee6-84d2-e0c0e7a6305d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abdaa24-3ce1-48e9-b410-99a763343e69", "sighting_of_ref": "indicator--61f1eebf-a6aa-4a36-b59a-c4ada2a604bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a1c619-b833-464a-a22d-dc7f0a9b4ed5", "sighting_of_ref": "indicator--33d69b1c-1d96-413f-9ac1-8a382d504c01", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c48d6a-d9f1-4b9e-809c-940c0fad014e", "sighting_of_ref": "indicator--5fce807f-7d6d-4cbd-a46a-a8bb211b35ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69849105-4aa4-4021-808b-4ab2cd26d68d", "sighting_of_ref": "indicator--e6b1f62e-ef70-4101-be17-e20a216e3235", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa7c7de-f7bf-41e2-8c3f-f95f33290049", "sighting_of_ref": "indicator--1b88e6f0-08ba-4f53-bbc8-7c05a7473794", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf3446c-2573-4a91-9c8e-d3f7fe6b3d3c", "sighting_of_ref": "indicator--69154b06-1abf-41d4-b21f-1c602022dadb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2aab8a-32e1-4ddf-8bba-bd0b3b27e304", "sighting_of_ref": "indicator--427b0e1e-48b9-41d1-a905-74ed606c845d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af6723d-6c2f-4917-b567-fbd398e52c9f", "sighting_of_ref": "indicator--34510df5-2cf4-4011-85c5-a7d9a44331c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7591b990-2a78-4fba-b0c6-e554e2d8c26d", "sighting_of_ref": "indicator--562826b6-09a4-403c-a073-e53e3a8237e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bc7552-78c1-4253-9910-bb6a78abcc43", "sighting_of_ref": "indicator--c5d9cb23-be7f-4d22-9289-1551140fbaa6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6781352-4e9f-408c-9b5c-37a2922e9640", "sighting_of_ref": "indicator--ae11a69c-b579-4825-8771-079802f624e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6384088-733c-481e-9779-c0e928722c48", "sighting_of_ref": "indicator--d087b50d-9cb2-43bf-9e6b-c2c3f5ba1a92", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629540ad-bee2-416d-a72c-ce61d0339e12", "sighting_of_ref": "indicator--97df3ac0-553a-464a-b4e8-7eda39683261", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040ddc99-b812-48f2-b371-3c53e1b1e48d", "sighting_of_ref": "indicator--dc6e7beb-da82-4ae6-8932-d8276d0e96cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4587c9-8786-4e80-b634-f8f3f2285553", "sighting_of_ref": "indicator--9bce19dc-7d85-4e5e-b6ce-d5389d09acbc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed175f8-705f-4980-93d2-c81d15c91288", "sighting_of_ref": "indicator--1272a00c-6bec-4ce6-aef5-32c50ab68e8b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad161bb-04da-4ec3-a8a3-32cd4aacb434", "sighting_of_ref": "indicator--ceb4e4fd-ca21-43b4-8e93-1fa76acc6f2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3228eb20-e3cf-4ce7-8c4f-885d275b59f7", "sighting_of_ref": "indicator--4b76be43-bf03-411e-a517-4c699650ffd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8560d1e5-6fae-4c90-9937-131c12728a51", "sighting_of_ref": "indicator--06e43a24-1712-4158-a992-90333f827735", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b5d555-008e-4148-84fa-61f25df5f662", "sighting_of_ref": "indicator--3934c47f-e269-4d9d-8246-75280925d95d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e464af87-873e-42f6-b668-d63777f8911a", "sighting_of_ref": "indicator--35846f63-98a0-4b57-9bc2-74eab141d9b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f03fdb-b204-4eaf-961c-713fc18f1aaa", "sighting_of_ref": "indicator--3f924f0a-5121-46ca-9512-aa3b8d6cb2ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ec1458-58d6-4db1-8e22-3a3343a8705b", "sighting_of_ref": "indicator--fc5a2179-2ec4-4749-af1d-24d822bdcf51", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799810df-4aaa-40dd-b5f0-f239163b401e", "sighting_of_ref": "indicator--cc90ae68-a39a-4be6-ad0a-4cd6a0c60b57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102a7897-49b9-48e1-b76a-eac4e106654b", "sighting_of_ref": "indicator--c6667197-42a6-4d22-a246-2770a7f5f6db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c660a096-73ad-4cd2-ab07-3186da77c18a", "sighting_of_ref": "indicator--5757327f-b7a9-42e9-99a2-fd1cfe621b49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef9ce2c-356b-4cee-b8b1-8ab5b86e0263", "sighting_of_ref": "indicator--a4ac0067-5471-4efb-9011-ff38f604b383", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc3e3e9-a18d-450a-a261-3fbcda59c4c2", "sighting_of_ref": "indicator--bc7f2852-52a5-4acc-bd99-fee47fe76959", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a6ccb3-c9e9-47d0-8c3a-d376781e6f05", "sighting_of_ref": "indicator--17eff31c-3090-478c-a781-455a8e6ffa86", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a7b7e9-f50c-4236-b5cd-d8971403ed0e", "sighting_of_ref": "indicator--5a891c72-e33e-47ef-952b-45dcb7269f50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253dbf38-4029-4078-b97a-fc9c77b80b01", "sighting_of_ref": "indicator--72a5a54f-d42d-435d-bca1-4dbc5d3b60f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc94a35-4cc2-48c8-84d2-1210eb8f4b78", "sighting_of_ref": "indicator--79f4e77b-4633-4c04-a00e-0e58029ede62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd054e3-ec5d-4329-aa4e-2a9bc767c735", "sighting_of_ref": "indicator--5f6bbf40-e8a6-44e4-b6ba-f0612e206581", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d0ecc1-56ef-4460-8878-0aa2d689944a", "sighting_of_ref": "indicator--5f6bbf40-e8a6-44e4-b6ba-f0612e206581", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e28b128-8070-45d3-a2bd-6e44ae4a419b", "sighting_of_ref": "indicator--2fd7ecee-1ba8-4837-9bd3-d3004350be09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53dd355-d1a2-4f4d-9d91-216308005cbe", "sighting_of_ref": "indicator--26fc3332-74fe-4823-9ed6-92b127a720a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf550b15-658b-4e2b-b423-588f06530e8b", "sighting_of_ref": "indicator--fdbab191-9b32-44fb-b2a6-2d5fd77e7cab", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbbe222-1580-4b05-bd7b-d8f13ec46f5b", "sighting_of_ref": "indicator--0fe3906a-8f9c-444d-9794-102800c618fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311d5b5a-194b-48f3-a2a3-333beaf1e8d1", "sighting_of_ref": "indicator--9d5fbc60-01c1-4a57-80fe-7e25efc499e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b237c3b-4c1b-4071-9279-d2a297b13ec1", "sighting_of_ref": "indicator--6a87578f-e5bc-430c-80e0-435cfa317e2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b779e248-79ec-429c-b8d1-6fe1472396a0", "sighting_of_ref": "indicator--ae09fae5-bbef-4a10-88b4-c83a6e095875", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38057b5a-01a9-4268-bb14-767d7af8ece5", "sighting_of_ref": "indicator--44956cf5-f1e6-479f-9581-eae668517fef", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4425c02-76a8-4e1c-aec1-55ebe2d84fd4", "sighting_of_ref": "indicator--44956cf5-f1e6-479f-9581-eae668517fef", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f3a9c9-f713-4a4a-8fdd-bda82163cdfc", "sighting_of_ref": "indicator--ae7ad807-bb99-4a45-b8dc-fa3dfab2629b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9f3f81-a901-49c4-af9a-404104b73c48", "sighting_of_ref": "indicator--40a2a164-37bc-454d-8695-331e04530616", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70276994-2f5e-4617-be72-0c51b686c7af", "sighting_of_ref": "indicator--40a2a164-37bc-454d-8695-331e04530616", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01af109-9669-42b9-ba8a-def75165f9b1", "sighting_of_ref": "indicator--78de9c09-768d-4eae-b910-63f042e5fcaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49f3032-f00a-4889-87e0-82b93a8470e9", "sighting_of_ref": "indicator--1068662c-401e-4149-aa27-847cf19dd199", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adb5eda-abef-4b53-af65-d72f42e8c5a6", "sighting_of_ref": "indicator--eeac2a7a-4d99-41ac-bc44-7ff67a519405", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74a5861-9db0-4acb-925a-aa0435b377ef", "sighting_of_ref": "indicator--f47188e9-6aa5-4613-ae52-330912f5d08e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d34e20-053e-48fc-b5cd-95872ee38436", "sighting_of_ref": "indicator--9343c40e-b27e-43dd-8841-ce59b76dc56b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c720b944-fcc8-420d-b414-60027fd4148e", "sighting_of_ref": "indicator--940e617a-3e03-4d87-9511-ec6d278fbcab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eb7a1e-c81e-456f-91f7-80d46efc4443", "sighting_of_ref": "indicator--eb37e178-8d75-40b7-8ac8-dca57cc611dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdc1c1b-2254-47a7-9fa7-8e1488acd764", "sighting_of_ref": "indicator--26bc6aa7-c238-4115-82df-32a4635f0b4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66bb5e8-a262-401a-adc2-d03bc25712f9", "sighting_of_ref": "indicator--2e48684f-987b-46a9-aecb-484b8f905e0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a40ac4d-8c52-462f-b8b7-5e23d1f6fa82", "sighting_of_ref": "indicator--b0d18e2a-fbae-4dc2-a525-18cf5b34ed8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206af910-d276-4144-8443-379345b17e57", "sighting_of_ref": "indicator--cb94e153-d956-43a8-9cec-5e3a108df636", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f0fac4-7fbd-4479-9e24-ef9bcfcfba77", "sighting_of_ref": "indicator--40c38f57-f329-4481-8a99-95afdfbe66b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dea9a7-d033-49fa-a8a6-0fef6d5f2de9", "sighting_of_ref": "indicator--4c2d9bfb-d2ab-40cd-9b8c-ccaa229e396f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd0f992-84f3-4b7c-9042-a9e2cc68077f", "sighting_of_ref": "indicator--b83fc5fc-b1d2-43d2-8a6b-4701578d5522", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120ddf0c-f916-4668-9815-c438eb9c77b6", "sighting_of_ref": "indicator--fc148e0f-33a8-4c9b-8f76-7df04d251435", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfac8ec-ca0e-4f89-9679-2f45cb5f6116", "sighting_of_ref": "indicator--91bfe497-465e-4141-a3f3-65c0ebb627d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f166c7-c430-4b36-8ed6-f743b8c4fd94", "sighting_of_ref": "indicator--6a8cd585-4ab9-4897-a79c-ca889f07b61d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce03664-fe46-4e89-bb74-db84d7c5196a", "sighting_of_ref": "indicator--1bcf084d-0ce0-454c-a950-db89688383d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc01f0a0-41a6-42d6-9d9b-de6946de481d", "sighting_of_ref": "indicator--a6ee2e5b-e2c5-4776-af1a-6d0c5dd42588", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c08d33-5677-435c-a5d1-23954d789466", "sighting_of_ref": "indicator--04ee9f0a-fb26-42d7-b50c-ec261ee3b213", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4405fd-6d8b-4b43-b807-6a187b7bab45", "sighting_of_ref": "indicator--bb30a57d-f83e-49b9-8ecb-17b031a4d078", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df4abbf-117a-4237-bd80-60ed930be7f6", "sighting_of_ref": "indicator--f1915e3a-1f32-483e-95d6-f961df1b99dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3054fb42-874b-47d6-8c16-0bde0a96f599", "sighting_of_ref": "indicator--8c69cfaf-e75d-45d6-8611-b7739ff9c40e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e7d109-a8c4-4662-997c-c6ee2af1f8a9", "sighting_of_ref": "indicator--6ed2eb1a-1400-4ebc-a8d2-673f3130b094", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ff35bf-2d3d-45c9-a2ee-80cf93efaa70", "sighting_of_ref": "indicator--834a5994-6a39-4d8f-bcd1-438a3513f543", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57daafbe-8f43-4250-98fd-1c3247c94333", "sighting_of_ref": "indicator--cb815f84-4cd0-40ea-8ac0-7b0d922842d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8065def5-c904-4091-a821-7053b8f1994a", "sighting_of_ref": "indicator--a064fce0-f352-4a77-a9ac-8fcf36e186ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a3f97b-05ef-48a3-89c5-c31d6799bbd9", "sighting_of_ref": "indicator--ffdb7f0c-7799-43a5-87bd-e477070ef657", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d0939-54c7-499b-a259-4dffbfa087e7", "sighting_of_ref": "indicator--623aaa92-c471-4d7d-b99c-93faadb12faf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e87270f-4532-47f6-aaa7-25e7e3311123", "sighting_of_ref": "indicator--22361af9-50a4-4a95-845f-f55cae7cb181", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487f353a-1f8d-4fdb-872f-f848f8f91f59", "sighting_of_ref": "indicator--2b3a6e03-9027-4090-8abe-1ba210ca8b75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9344d5ba-8283-48ab-a3ba-a4ba0f20c7c4", "sighting_of_ref": "indicator--0282be45-7b84-4567-8ec7-ff0902a86491", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cead4a-f9a7-4ded-b79e-50a632535116", "sighting_of_ref": "indicator--b0f40dfc-758e-4c85-97f8-f318362d35c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5774c68-75c2-47ba-89ae-bdc45b7a4f5e", "sighting_of_ref": "indicator--049b41c9-e4be-42e7-8ca6-5323aefef2c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321f9086-396d-4bb8-9dce-e426fc4e525d", "sighting_of_ref": "indicator--df91089e-c3fb-42a4-9499-c6791b9519ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116cff78-205b-40f0-a290-84d8d6ec61ad", "sighting_of_ref": "indicator--f3313e58-e7f8-48af-bc36-d34a3a784183", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27984223-ca9e-4543-9285-04b8032a241b", "sighting_of_ref": "indicator--c3866e5e-3b1b-4bad-a04a-8be53020a514", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d802376-8920-4ce9-87d6-f212fd765a50", "sighting_of_ref": "indicator--4128ed38-fa0a-47d5-83f2-ea6ed2e87a53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6c7b1-e829-4f47-806b-4f6e7215cbf9", "sighting_of_ref": "indicator--e64236a1-b3d0-40de-8361-202053b9072f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8804e30-7ab4-4519-8865-da9d9c0a4e67", "sighting_of_ref": "indicator--d622c123-dec7-44f2-9790-e3c936992756", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea0c2fd-93a7-445c-8d2d-f635c7365f66", "sighting_of_ref": "indicator--1e74815c-315f-4024-a90a-4d67cf6a5dcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77df8c0-1088-466e-8387-070e8b8a7526", "sighting_of_ref": "indicator--b395b018-47be-4233-8adb-45856e49ab3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f921f44-d6ff-4743-ae7a-fd78b8ada9b1", "sighting_of_ref": "indicator--2c2dd59a-e0d1-4d7d-a009-1f3cf69375c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa8e735-75e4-4429-80af-b68b8a30d8a3", "sighting_of_ref": "indicator--35607266-40c8-494f-ab5b-4d29feee55e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a5d1b4-db9f-4dc8-ae8e-1fe74f07bf69", "sighting_of_ref": "indicator--e1649e29-187d-4e0e-a9fa-dd5cccdccd7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23db8693-297b-4be5-b513-5fd5385662dd", "sighting_of_ref": "indicator--a476db2c-2ed9-44ba-9bcb-3e9c11dd7159", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ad8fc9-409d-490e-986b-14e1a5fd5b9e", "sighting_of_ref": "indicator--e7918d74-9f10-46b9-a666-49b1d2a14986", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d7e947-e856-4f78-8219-a8ab9b4c8f7d", "sighting_of_ref": "indicator--9787256a-a16d-45a9-a134-4bd443247281", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eecf3b-bcb8-4dc7-97ed-0fa6bb9ba745", "sighting_of_ref": "indicator--cdd4dbb2-373a-423c-9507-0bdf2dd4dd7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef8bfca-1a9f-4ebc-8362-f6d040c35de8", "sighting_of_ref": "indicator--afbf88bc-20a7-41ab-85ae-32ab45e4915e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0940e7-fcf6-4dac-baf9-84df4dbfcede", "sighting_of_ref": "indicator--81f58b91-3c98-4504-965f-3482a9fa00fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533aacd5-b440-4bd5-a7f7-adfbde7f31ad", "sighting_of_ref": "indicator--c2d96910-28a5-423d-a6ec-fdd7ae0a84cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae7ea65-6322-4a42-9a0a-e13fa3713f8b", "sighting_of_ref": "indicator--51fc59dd-039d-4067-a945-d0ccb97e8936", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706fdc20-f6de-4b5c-b3fb-b98793f0674a", "sighting_of_ref": "indicator--da1e628b-99d0-4b5c-9af4-208c8c883ca8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1313dff2-bee9-4620-85b1-1f733cf62154", "sighting_of_ref": "indicator--561db47e-f6a9-41ec-9214-9ff0322e78f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8415e859-86c4-4f47-81dd-722a58e10283", "sighting_of_ref": "indicator--4f9c9f07-1574-4922-84e3-f1a41d557c99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c09717-b78a-46bf-836f-b5d934dac048", "sighting_of_ref": "indicator--628ac2c5-e34e-4353-8fa2-623bb12bab31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bffd727-1a90-40cf-a610-871578179218", "sighting_of_ref": "indicator--284c4794-953f-4617-8485-b6ab2b0c3428", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92371cb-8053-4d01-abac-0c061833db5d", "sighting_of_ref": "indicator--9737f8e9-738b-4c84-80e9-086751465507", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81f944-3ae8-46d4-b280-b46d6112c5d4", "sighting_of_ref": "indicator--7d56d14a-5309-40ed-a470-cc3d1e52403b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f3a7da-edd4-4197-b1da-c9896e21165b", "sighting_of_ref": "indicator--888cbc39-67c0-49b6-ad9b-0698ad196bbe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959156ca-54d0-4c8d-8f0a-769c99b2cb43", "sighting_of_ref": "indicator--e390f701-7bc6-4972-9091-943856b1c22d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09f1695-e143-4ddb-9c18-7d8437d80796", "sighting_of_ref": "indicator--e6cb63cc-f1db-48d0-b3d8-89e742997c9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a62b4b-db4c-429c-95f9-81c9201fde4d", "sighting_of_ref": "indicator--471c2ab9-9916-42ff-ab02-b08ff0d66fdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e55838-6edd-4e05-8092-3bbfe81f51e0", "sighting_of_ref": "indicator--fd0ef237-9d6c-4851-999b-2ad5958417c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1ff35f-7319-4700-bfa9-83b74db71aec", "sighting_of_ref": "indicator--08be803e-0e16-4496-b58d-ac4a5c5b8256", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0ecb2c-b20f-4b21-ae0c-7ee84d31987b", "sighting_of_ref": "indicator--c6651bb2-b5a4-4112-8127-7af8bee3c0e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dae650-b65e-4964-b6bd-cd25943b394a", "sighting_of_ref": "indicator--b14740ba-38ce-4dcf-b2eb-736071f4d681", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05da397f-8dc6-4352-8bf0-2921fd08a025", "sighting_of_ref": "indicator--4b1b1a2f-be80-4927-a1ee-ffd85f18f401", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3655f7-1713-47a2-9409-a539162f2804", "sighting_of_ref": "indicator--87fd9a61-0fb0-4085-8045-9b6f12ef66ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fd29d5-3fe8-4b20-85d1-50b94de1b5ba", "sighting_of_ref": "indicator--a9a86ba4-6036-4102-91e9-563a50fe75fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d637496b-563e-41bb-af8d-42712f148af3", "sighting_of_ref": "indicator--992da437-776e-4ae9-b6ec-5615594ee063", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3ec5b7-6928-40ce-8155-53ba3492b257", "sighting_of_ref": "indicator--6a4d8c52-c109-4217-9dbd-b7f34d23b3eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc44cc0-68ad-4bc6-92c2-0ac6e2395784", "sighting_of_ref": "indicator--1bd9472c-1c5c-43c8-80cc-ce280b3d959b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5660c53b-8433-4efe-998e-5b211937087f", "sighting_of_ref": "indicator--38692ff3-0d61-4123-9726-dc3b81bdb2ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617da369-c877-4eb9-bf0b-06d46a0cea23", "sighting_of_ref": "indicator--497f6698-4eb8-40b0-acf8-92e61666b943", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74abb404-b183-4cd6-8010-6f4fa60a837a", "sighting_of_ref": "indicator--b8b1a4d6-ad7b-4083-8c75-06bd212d41ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802dfef6-118c-4d45-ac98-a9157d481e67", "sighting_of_ref": "indicator--d36a7de3-df3a-47ae-a46f-43cc9fa6fe62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec96bc5-2742-4c44-998f-5c2bd7ae4653", "sighting_of_ref": "indicator--bb7987d1-7c10-4d87-bed7-3f87ff8d8df9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c03ccb5-6b5c-494b-adbe-a6439832790a", "sighting_of_ref": "indicator--c4c438f2-a4ae-4bdb-973f-8554c09cc47a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bdd36f-ba97-4aa7-a4d6-17c81d8d21a2", "sighting_of_ref": "indicator--e83d035b-4698-41e8-98ed-6d0fbcfb6218", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c078c6d-3ff3-41e5-874c-b0c3fabbd1f8", "sighting_of_ref": "indicator--65b7488c-40c1-4fea-927b-9f6521bbc7bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8365ae0-8cd4-4381-a8ca-241735f04229", "sighting_of_ref": "indicator--17b7a6b5-d6af-4cad-9ced-72875bc3e97e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5909a55c-5649-4825-844c-c952c955253d", "sighting_of_ref": "indicator--b4c5d496-814b-4815-8224-6d1c8c81efca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96bafe6-6873-461d-938b-f080655aa3ab", "sighting_of_ref": "indicator--7c3cdcd3-d682-45dd-b851-51f6fe3bdb53", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2948ce58-fbae-4860-8c0d-56f52824f8dc", "sighting_of_ref": "indicator--7c3cdcd3-d682-45dd-b851-51f6fe3bdb53", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b21ec5-00a5-4fb0-b952-d6435e74fe3f", "sighting_of_ref": "indicator--aacb468c-5029-4107-aedf-844a7f3ea956", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21df847a-b3cb-4af8-bed4-6fd68382aa9d", "sighting_of_ref": "indicator--80bdf2cd-514b-47d2-bfa2-7e161afbb05b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811089af-51dd-424b-9402-2594bfb4cd27", "sighting_of_ref": "indicator--22969c4e-09b5-432c-bf56-162c35897fb5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ee19be-7e2b-4d35-aa81-e37f94dc627b", "sighting_of_ref": "indicator--b3087c4c-0347-49a2-9cb1-535135dcc279", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f8123f-4957-4d29-92b5-060cb575b235", "sighting_of_ref": "indicator--b3087c4c-0347-49a2-9cb1-535135dcc279", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513b3a2-208c-4ae7-ad06-96379826fbe2", "sighting_of_ref": "indicator--87ef2867-1cf0-4d94-b572-91ae8c1e0613", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4747ec5d-8020-42f0-8acb-cca27dd88470", "sighting_of_ref": "indicator--4f65abd4-5efd-46e7-b074-0eac8002106b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba61a389-ab9f-4c8b-931a-13efeb38fda9", "sighting_of_ref": "indicator--4f65abd4-5efd-46e7-b074-0eac8002106b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047fb17-eb20-484d-951d-67237416c73d", "sighting_of_ref": "indicator--675f6237-189f-4269-8486-55e21fd354fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef01433-6998-4149-af4d-1868ec41bc13", "sighting_of_ref": "indicator--55102e5f-8441-4e1c-a49a-3a0e52a10269", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576c8238-8da3-4acf-9704-a549f94dcc2c", "sighting_of_ref": "indicator--79206647-53a7-485d-a0b4-c558a7b7d35c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c04fce-6362-446f-ad90-f381dffc56bc", "sighting_of_ref": "indicator--79206647-53a7-485d-a0b4-c558a7b7d35c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71af0ef-131c-4c1b-8ab2-66aafe6560da", "sighting_of_ref": "indicator--03cde28b-c0ff-4e96-a90b-aeb79d47cf91", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03abb561-1a9f-45f6-8c1d-fcdaf6d5d764", "sighting_of_ref": "indicator--0e1cfd4d-c57e-46cf-be80-682c6f9c4af2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c699f73d-357e-4967-92c2-f55d471d4712", "sighting_of_ref": "indicator--a99bd42e-c6be-4f46-a95f-d820ace1b907", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca69a62-8738-42c2-bf4d-fb7249a8a3da", "sighting_of_ref": "indicator--26ba54a3-c621-4ad7-ba48-337687f9da62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aef68dc-ae7b-4c2e-9c2e-ce380159dfdb", "sighting_of_ref": "indicator--41b03b34-5166-408e-a63c-a959c23602ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6990eff-2099-4275-ab55-1254ba8b11b6", "sighting_of_ref": "indicator--89e401d2-669e-4a2c-9a07-5ce680843b56", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901c2357-43cd-4303-8758-62f810a28728", "sighting_of_ref": "indicator--89e401d2-669e-4a2c-9a07-5ce680843b56", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a89414-4e0c-4173-9838-5c5b10ba6522", "sighting_of_ref": "indicator--e8357584-d3a1-4ceb-a0a1-a8adbeff7f72", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea91755c-4071-4d59-87c6-c580e15c745e", "sighting_of_ref": "indicator--f11dc456-b5de-462b-aea7-b5b1e888f087", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac3f6cc-dc3e-44ae-a1d8-89604881a7f8", "sighting_of_ref": "indicator--95dff5b6-2587-4843-9b1d-5bf3fe289a1e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c557e0-ab60-4506-900d-5d7e3ffe4890", "sighting_of_ref": "indicator--3e88f0a3-449c-4fcb-a784-bab523d4d8ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762643f4-318c-4eaf-83a1-a4f7f60338ca", "sighting_of_ref": "indicator--268a7487-04c3-4f75-a77b-1c5dcb7561c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1ced79-9cc5-429e-aa56-fea8ed351803", "sighting_of_ref": "indicator--4d055158-ca0b-46c8-9c52-56857c8fe3a7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f11bb4-ee31-435d-8046-e15f49722038", "sighting_of_ref": "indicator--710489ec-66ea-41d2-aaa4-94c32afaf91e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f0f80-26ad-4b4f-976c-844c221ef375", "sighting_of_ref": "indicator--fbfaffcb-bd32-4445-a698-4da071642d5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f3043c-3a2b-4036-aafe-60493043ddfe", "sighting_of_ref": "indicator--97c9f5b1-69ac-4f02-83ab-3a09c762d59b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179f2916-e5ef-431d-8861-f4ad398d69d6", "sighting_of_ref": "indicator--117d19f8-2ec6-491c-8bdc-25c7880b5fe8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b816b06e-2a5c-4732-a0c4-cbff033c2aaa", "sighting_of_ref": "indicator--9761f6f2-3515-439b-92c7-743d908b48ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0cd759-3210-4b41-9ca9-1b614d8fc0d7", "sighting_of_ref": "indicator--0ee75d49-fad9-45eb-be8f-6a95a4c5223a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14e9856-0478-40e5-af9d-3c69415edec5", "sighting_of_ref": "indicator--7a0fa06c-ab9c-4c78-b585-57e81cf7f62a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa986d-0a93-4993-94b2-dc772dbe13b9", "sighting_of_ref": "indicator--72dcb18b-4f8e-4c23-aa69-55978b0b3bc6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfbe7ad-1443-46d8-8b8c-7eae2e59a029", "sighting_of_ref": "indicator--c16486b9-e009-40a1-929d-783f0c8a7737", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adb27d0-8252-4175-8b00-1f102e94c5a7", "sighting_of_ref": "indicator--9a0fafb2-9ab0-4b8e-95bc-f0ec86475472", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efecf846-bffd-49f4-9c5c-21ceae2d2d8a", "sighting_of_ref": "indicator--1c365c52-9abd-4850-9125-816eb056c740", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26150012-eaeb-4323-a41c-8fb7be819031", "sighting_of_ref": "indicator--25422c40-b3bc-498d-b5e4-2cf06c21bcf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aa8d9d-e123-48bb-b6d8-21f059b45cac", "sighting_of_ref": "indicator--5e74c485-2ccd-4543-b1a4-39b2676b1422", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba51b89-41fc-4fcc-bab7-91daade5aa86", "sighting_of_ref": "indicator--b3ab5a0c-cb5b-4cd2-904e-b7b7706639f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d1b015-a5e1-489b-b37a-cc4ee48a3612", "sighting_of_ref": "indicator--e168b4f4-6b10-407c-8a95-222fe4140fee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371b800b-f821-40ba-bafe-673beca73433", "sighting_of_ref": "indicator--d9debc93-fcb4-4594-8994-815502c880dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e096c8-73dd-433f-94fc-d73b6ebef325", "sighting_of_ref": "indicator--1f350051-9e98-4ec6-a60c-578dc8151884", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19da8a7d-3d45-4472-b79f-7735a4e393b8", "sighting_of_ref": "indicator--bd279a75-cbae-41b6-97f7-e7e1f8117d54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3583aa8-c22b-4f26-8f94-0177778281cd", "sighting_of_ref": "indicator--b99bba69-37fe-47a7-a0c9-02e8f22b1e6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b58815f-e565-404c-b028-a09118e4ff49", "sighting_of_ref": "indicator--fe202f53-84b4-4b79-a69c-54ad4354166b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d809ced6-f596-4fe6-99d5-23410c5ab2ed", "sighting_of_ref": "indicator--f2898500-2b14-4b45-8416-fd896578e076", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c1dacd-07a5-45bb-9582-e6f853ce10ae", "sighting_of_ref": "indicator--0e55518e-63ab-4c15-a398-b72fc7fd542c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cf2106-a55c-4925-9611-ecdce39bcc72", "sighting_of_ref": "indicator--f683af0f-a00e-4a54-b858-207120615874", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a67168-879f-4314-907c-eec8a61dd169", "sighting_of_ref": "indicator--57cbe50c-d0d0-48cf-8bd3-b00342a1e212", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db989649-f03a-4f59-996f-2e13322cd09f", "sighting_of_ref": "indicator--b887ff8b-f8ca-4fc0-9164-b29c5edf22dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182f3820-93a6-4650-8d10-aec4b1a8e4a7", "sighting_of_ref": "indicator--a8ef57c0-3774-4438-b0c2-42c65184fda6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2f2f6b-e64c-4212-ae2e-76d65776251c", "sighting_of_ref": "indicator--4d455974-2bf8-472a-b7fe-9de9ded725f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eeddca-79b2-490e-a157-2a8cfae86115", "sighting_of_ref": "indicator--047f8fd6-82e3-4901-b320-38446adc8f29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536f2443-6f6a-4e68-b311-4f7873a17c8b", "sighting_of_ref": "indicator--b3df44c3-d2ab-4575-87d6-5ce775d27e88", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c44014-504d-4d02-a02d-5385c8953294", "sighting_of_ref": "indicator--370971cd-0e75-4806-a7da-a9529a83b581", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763d572d-517c-4683-85c0-2a4c872ee6a8", "sighting_of_ref": "indicator--681d06a8-eb98-40ff-a2a6-004e2a4f91b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbd7903-e6ca-40de-95c8-228f59d1455f", "sighting_of_ref": "indicator--35a0326f-497d-4111-a7a7-210807589802", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf6ef42-6a5f-4695-9af3-2966dfdb8c22", "sighting_of_ref": "indicator--56c77808-35bc-4592-aeb9-3fd2d6faac2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f52c5f-f390-4e5f-be27-997e91d9d0f3", "sighting_of_ref": "indicator--f4f80bd5-894e-4a59-bdad-f35a60920fab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14274e19-64b1-49df-8a73-10d6df002ce8", "sighting_of_ref": "indicator--aa2cdc0a-fcf4-4083-87e7-ec1a10a70e03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d60b49-1792-4083-acac-654167dbacc4", "sighting_of_ref": "indicator--437140c5-8ce8-4f7a-9068-f3d84ba6ed66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af89883-94e9-4c8b-89aa-2af61537c887", "sighting_of_ref": "indicator--ce8a0520-051c-4ff9-8a2e-7e685113b89e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb85661-65e0-40f0-9abb-e2748de8e57a", "sighting_of_ref": "indicator--5146731b-1e17-4f3f-82ff-8a733b6360a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b8c2fc-8252-4585-81e0-fc55c176c757", "sighting_of_ref": "indicator--e59aeb77-5078-4777-8dd2-c3d441ba4be9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ddba19-b034-4027-affa-7766bbac4b1c", "sighting_of_ref": "indicator--f60beb72-3d51-4875-81b6-74fe6a69c261", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef44a45e-fb2f-4d6c-b86f-80d91700cb53", "sighting_of_ref": "indicator--975d0fbb-584d-4327-bd50-b6f855b0b174", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21897b7c-0301-4538-b63f-633d0725a3fc", "sighting_of_ref": "indicator--c5db3e83-e494-4345-be0c-49e0d07b767c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1713c7-af0d-4ba1-b4ba-b09f6af8f7c0", "sighting_of_ref": "indicator--9c413c6a-784c-4a94-83a2-10654a6a3e91", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093860ec-b196-4b64-8cae-806a0827b28e", "sighting_of_ref": "indicator--c8644452-3e6d-4d80-b45f-d8d81e62b254", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc8b854-4ba6-4a17-aa6d-0c0a9770a9e2", "sighting_of_ref": "indicator--26620210-8ecf-4c22-a701-c3e19104857c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c016a5d-fe5c-44de-8cd9-db3c7c5a737a", "sighting_of_ref": "indicator--bb1ddcb3-c5e2-4ccd-9d14-1b8cde640a97", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b62ea-009d-4271-8769-dc938fb851ff", "sighting_of_ref": "indicator--39092b94-aa1e-4be9-96d6-c286750a3ee2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300521f8-3452-4938-9be3-cbe40fd8f030", "sighting_of_ref": "indicator--18cb3f92-a3b7-453c-9bd0-2613471e5688", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53381432-8229-45e9-9473-520ab58ecaec", "sighting_of_ref": "indicator--a0b3d56a-b8d3-495c-97bc-85dea58d7b2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4dca43-1e47-4243-9e02-b03a8c0b0507", "sighting_of_ref": "indicator--4297c705-a492-46ca-a0f1-8c2c4fb6e2ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc28617-fe83-4c77-9121-3b8d255e32e7", "sighting_of_ref": "indicator--54e6fcb5-76d9-4a56-8211-a66498c24b80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15a1279-55e1-494c-b2a0-acb74e7690ba", "sighting_of_ref": "indicator--375dd917-2f82-4e2a-8f0c-dccc6deb850d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008801a5-4079-4ee1-a489-ec34e4ee9d50", "sighting_of_ref": "indicator--19437582-39bf-4876-92b4-4704f14d7650", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c1e97b-f42b-4cd0-b4f0-86126840b88d", "sighting_of_ref": "indicator--5841a0fe-98c4-48ec-81f7-f9c9726276b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50472ab6-e61b-4d4c-8c54-405252661779", "sighting_of_ref": "indicator--2cba78a0-a13e-4046-b0cc-8dfae5ced0e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c759b3-4ffb-44b1-9130-188b6caeed10", "sighting_of_ref": "indicator--097eefd5-a414-47e7-b509-5616f9cd1e31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1632c6dc-03f8-4a6b-bf4a-54a819165373", "sighting_of_ref": "indicator--204c96e3-0ad8-429a-9534-4ebf918c08ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b056e80-52fb-49bf-b54e-8d03ed792b90", "sighting_of_ref": "indicator--924f72f1-c68f-4858-9d3c-f090805ee0f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458a380e-788d-437c-9498-723f6eb0e831", "sighting_of_ref": "indicator--5299a2b2-b0b1-40fa-b3c9-0c0acf9caa34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9194fd-e3cd-45f9-90b9-c2a3bb8ab6c2", "sighting_of_ref": "indicator--d426f1c7-aa58-459d-ab2a-7e61f793f3b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ac4a19-7737-4481-bf71-dbc08752517b", "sighting_of_ref": "indicator--acefc834-e370-48f2-b41b-beb22bdf2808", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a10a8b8-b16b-478d-9d06-96685bb51cfd", "sighting_of_ref": "indicator--b6f38810-b542-4275-885b-c0503e449c7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e55f72a-c581-4ea0-9d2d-acd5df84fd5a", "sighting_of_ref": "indicator--a3ad8662-6649-413b-9d8f-635d4afafb10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c0fc19-0fc5-440c-972a-3c0ce95270c1", "sighting_of_ref": "indicator--b84b89d1-d2f3-431c-a150-3a8ed4ff8d6e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ac9fd7-f342-4e1e-b1a2-8b6a625e7962", "sighting_of_ref": "indicator--088bb06c-3320-4637-a5bc-c5deba3925ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e30d69-cea0-4c98-a80a-814205374fb6", "sighting_of_ref": "indicator--22a2771c-d3ab-40d1-b470-3f7374d9914b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd26d6-600f-4d96-b2dd-23e739f56667", "sighting_of_ref": "indicator--4a4febdc-1b32-4bdd-8284-8e20330c145e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f446307e-1f4b-4c68-af7b-9664c85d1aaf", "sighting_of_ref": "indicator--2377c5c4-417d-49da-87a2-ec04b0236f6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85ef474-2747-4696-abc5-43db04cc276c", "sighting_of_ref": "indicator--2377c5c4-417d-49da-87a2-ec04b0236f6a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c0673f-2268-41ad-8721-e321c1f4f886", "sighting_of_ref": "indicator--60586a7b-ac2d-4b21-a15a-950974bdb70d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d4a530-7658-408d-896d-b9e9d593692d", "sighting_of_ref": "indicator--e7c3482c-c76a-45d2-93aa-ec8ee7795bfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dbb5d9-f7a5-4e13-834c-2b53409fb0ab", "sighting_of_ref": "indicator--e8d6d2e0-d48a-46f0-befe-6552c495cd66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f72414-74fa-4f15-8237-44a2b7baf179", "sighting_of_ref": "indicator--ed27ecc0-ca1f-496e-9904-48b5bc753ae3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6db08b-1de4-4ebe-8471-4ae5b7a1724a", "sighting_of_ref": "indicator--2cebb85f-1323-4f5f-803c-1297483a8dbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa35f05-bdb0-4292-945a-5fd6ecd7f395", "sighting_of_ref": "indicator--b1d911da-fc3f-480d-91ed-1ff8e1154d46", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cae078-a1a8-4155-a1b3-dcbaf371ced2", "sighting_of_ref": "indicator--e1c00136-a9d3-4d98-ae85-f3f70bfa1f25", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8869a02a-99ed-417c-b1c0-0d3ad3a9e972", "sighting_of_ref": "indicator--ff8d654a-cd7b-403c-b15a-c9222b2951d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b35cec-0358-4a3c-a61e-90766321b34c", "sighting_of_ref": "indicator--2046b233-a3ff-4181-9937-70ab888bf1fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc265417-8968-4460-a893-fe9d16991877", "sighting_of_ref": "indicator--666c5e32-367d-46e9-9d20-2c7ecb961a29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ce14c6-e6de-4aad-a45d-3ec6f2305936", "sighting_of_ref": "indicator--32472d44-ca6a-41ad-b816-eef6c0a6bbf0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd2b2c7-0f38-4bc8-9df7-3b60113581a9", "sighting_of_ref": "indicator--79b7887e-e799-4e6f-a2cd-c4a00f98b4ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a36776f-295c-407e-a19c-d71334effda1", "sighting_of_ref": "indicator--60508a26-dc5c-464c-815c-c9be232a4589", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a949b1f9-b15b-40a6-bc8e-d7622b7a49db", "sighting_of_ref": "indicator--60508a26-dc5c-464c-815c-c9be232a4589", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664c7cf9-a6ec-443b-9be4-e6d6cb3d9c12", "sighting_of_ref": "indicator--7c0e1715-36d9-4c13-9826-f29f395e5566", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec6f581-0002-457c-9a48-850c883ffe25", "sighting_of_ref": "indicator--2d280b39-db2e-4c25-a205-987081d85d35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebe50fc-433e-4dd2-bbb5-150d8f8abf4f", "sighting_of_ref": "indicator--4427a281-5076-4f9f-88f0-9beeab9bfdf8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dab1996-5cbb-44de-bcf1-ee39d03c3d1d", "sighting_of_ref": "indicator--71fe9ba1-c544-49c9-b3cc-6dee4d860ae9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff004f0-ea47-4969-8b0d-f6adcdb7a0fb", "sighting_of_ref": "indicator--5f2ab9f0-28d4-41bf-8dee-9aab50d546b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3938ce94-5b75-4480-aebc-cdb35634b168", "sighting_of_ref": "indicator--987f8fa7-2885-49e0-9d54-55e52f595bac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fc93b6-c6ea-4841-ac58-2baf3b5efe93", "sighting_of_ref": "indicator--ff79657f-4b41-477b-9c2b-1ca955640820", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c85cb99-1171-4dc7-8290-f1e4fb809970", "sighting_of_ref": "indicator--faf109eb-52f6-4868-a8a0-25337491a4b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766fb66f-1ae7-4971-8f15-39aeb95ac96d", "sighting_of_ref": "indicator--c939837a-d11a-441f-8e81-f8ef8a562554", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb2be2f-9615-47c6-bb8b-8951b02142f8", "sighting_of_ref": "indicator--282330f3-00e2-411d-b595-a768734d52b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a3cbd5-f88c-4c8c-8f99-abdc1f41d8fb", "sighting_of_ref": "indicator--bac85344-2aef-4c39-baad-b357d42a5f2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00ed096-1b85-4f7c-b2d1-b2f16da70a5a", "sighting_of_ref": "indicator--2f3c0788-5467-40a3-9f3c-4bb0ea8d6138", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e84b06-4ab0-41dd-8ef5-717369ac7524", "sighting_of_ref": "indicator--d796103d-4f2c-43e1-83ee-42fa49cc20aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b2a6e6-66fa-4163-8530-e4c3e61c0a1c", "sighting_of_ref": "indicator--e26ebad6-af2f-4deb-be64-8f5a396be9c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599a93de-b8da-466a-b5ad-c75cc43ca9b6", "sighting_of_ref": "indicator--ee0f6d9e-9ba6-4f60-8cb5-265b6649b99f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fc8a29-cd97-44ae-b3a3-ecce8abe7cd4", "sighting_of_ref": "indicator--53d1ff73-cfde-48b2-ba79-918f6803adda", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22e4834-da34-405c-a3d6-3692c2fdd3a6", "sighting_of_ref": "indicator--7925a7ac-8769-4813-ae7f-f489b5b101a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99607302-4976-4dde-93e0-65ac920eb093", "sighting_of_ref": "indicator--ead44f4c-1968-4854-801f-2ec2a86c467f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62b7c66-df2c-4cb5-9f83-ed8babf05699", "sighting_of_ref": "indicator--b24aab06-2aaa-4501-b29c-4cd4edd7ccec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6849efea-a4c5-4718-bfa4-9105bd011c26", "sighting_of_ref": "indicator--70933180-c739-4979-ba61-9dcb3745b1c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10093bf7-e70e-495b-82ca-8a7187b74092", "sighting_of_ref": "indicator--49984941-e2d4-4231-affc-c23fe79c3e0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e108dfba-af2f-4bba-a718-f9ea7b667b61", "sighting_of_ref": "indicator--dd34a511-d911-4a3f-8687-41917f3b3ae3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847f1dc3-7822-4963-8bb9-9258bc5b28b3", "sighting_of_ref": "indicator--8f2b9b22-a333-4355-97d6-696ea4511eb8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db55b4-99e8-4ff5-ad71-7649fe1514c8", "sighting_of_ref": "indicator--ef73416d-0798-4986-8677-104c1dcc07b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad32fd71-ea5e-42cb-9798-b88bf1e7ed0e", "sighting_of_ref": "indicator--8346bae6-989f-4c83-a344-c02e9e585317", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d807076-e44e-4801-a948-2b0cfb64991e", "sighting_of_ref": "indicator--2bf832d5-40db-420c-8841-6aede68c3c7a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e636447b-d146-4d7f-b3b1-352fde10e525", "sighting_of_ref": "indicator--9e4cc1d1-c285-48d8-98a7-1fd37342c7b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bd104f-c101-440b-9bbf-ccb36dc34c1e", "sighting_of_ref": "indicator--3c48595f-4f38-4919-8f8a-346e158c558d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bf12f4-8d74-42d8-af76-43371a5d4130", "sighting_of_ref": "indicator--751d8f52-5603-4cfa-a7fc-c9c40b784e61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768dc395-9094-47aa-8c81-d979037c4096", "sighting_of_ref": "indicator--4e28ae60-618a-4b6c-a1d5-b2f8ced7965e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af37186-ba58-48eb-99b8-436a59703295", "sighting_of_ref": "indicator--a57d3229-4508-4fdf-b9ba-e97d63d74716", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29876525-c616-4b98-9496-06f5747351a0", "sighting_of_ref": "indicator--f77a1621-1df1-4212-bc0f-5ff0440f123c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173a74d3-68c4-4362-9baa-2b05b7507e08", "sighting_of_ref": "indicator--c609ae19-6392-48c8-ae18-12d461d3fb3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b900866-33af-48d0-8141-c2de6a4900cf", "sighting_of_ref": "indicator--ff0a56b9-7879-4e1f-bc38-e023a1c04232", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4c771e-7e6d-43d5-a930-3c3aa1bf31f7", "sighting_of_ref": "indicator--9f148bca-3d69-4c30-82db-a93f26f85f11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d88b67-3af2-4fa6-9a6f-17d6d838ce58", "sighting_of_ref": "indicator--b7037b6f-cd73-4018-bbf3-f53d056a43b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca6a6d4-043b-40db-95cb-0127844b0128", "sighting_of_ref": "indicator--f041f6a2-1acb-4c3c-b8aa-f6af5762af96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d47b06d-f5fd-4103-b18c-24f88bd3cfb3", "sighting_of_ref": "indicator--039c2470-85db-45d2-87fb-9ba9904d3f72", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9695c3a4-2fdc-425e-834d-725605a509fd", "sighting_of_ref": "indicator--8a9dfd6a-2e70-474f-94c8-1ec4f3947bd5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2610843-d6ab-437a-91ec-c89fbb2090f8", "sighting_of_ref": "indicator--a3865022-03bd-4865-82d7-debc0307974d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a094e5-0175-4487-826b-8be94415a61a", "sighting_of_ref": "indicator--13d4aeba-f619-4c74-974d-8818655e424c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf771f9-7ead-4f18-be1b-303b754abe40", "sighting_of_ref": "indicator--fef31414-47bb-4d2b-90cd-b12a204a8e30", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980e5a70-1b1f-432c-9929-d9d5289af374", "sighting_of_ref": "indicator--3e1c22c8-c66c-465f-b05e-916226d8b30f", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e366d06-f81a-4b6a-99c5-b2d2401f7d40", "sighting_of_ref": "indicator--3e1c22c8-c66c-465f-b05e-916226d8b30f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ae7521-1df2-4a2e-9310-7d5fb74db030", "sighting_of_ref": "indicator--6f0393ac-9101-4994-9367-aabd5d543c12", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d34ded-a21e-47fb-b69f-5f8664503ab3", "sighting_of_ref": "indicator--6f0393ac-9101-4994-9367-aabd5d543c12", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f05a07f-f98f-4865-ae59-550a563b33e2", "sighting_of_ref": "indicator--202d7f3b-54e7-4313-af6b-ebaab6290b23", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107116f0-ccf5-4b77-9abb-e65d72029e78", "sighting_of_ref": "indicator--202d7f3b-54e7-4313-af6b-ebaab6290b23", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f1a9d3-1792-49dc-a88b-7b2a97312e60", "sighting_of_ref": "indicator--40b01645-8b6c-44ea-9b1b-ca27e0df7999", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ea9adb-60d8-474d-8ca9-14f0d591c605", "sighting_of_ref": "indicator--9f9f8571-8a57-4463-a172-148ae7ed4e1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da26886-29d0-4973-a521-38d5843820f0", "sighting_of_ref": "indicator--31d9de84-5fdd-43dd-89fc-d1719a2cd7ad", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3b5eae-b192-4091-a4cd-a181139e6591", "sighting_of_ref": "indicator--094b3790-8406-45d2-a4d3-2ec8f5cb4418", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe460fa0-65d4-470c-bf19-5c7fc70bb7a5", "sighting_of_ref": "indicator--978cc6d7-d439-4471-bd30-760960f48404", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f811a49-0490-43b7-abad-753fd89274ac", "sighting_of_ref": "indicator--08c968ba-2807-471a-aef9-d4fbe3ec38b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d15c476-60c7-45aa-8462-2d68a7247d2d", "sighting_of_ref": "indicator--b6407f4e-d12a-4d2c-90c9-d33f84177599", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d72b8b9-e078-48e5-b152-eeb3ec67b209", "sighting_of_ref": "indicator--b6407f4e-d12a-4d2c-90c9-d33f84177599", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca26c6f-75cd-4e37-b487-89a6e5405d12", "sighting_of_ref": "indicator--f7a15739-c84e-4b1e-a75a-16637a2ef149", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a54019-315e-42c0-b15a-f6eff7b69cf8", "sighting_of_ref": "indicator--f7a15739-c84e-4b1e-a75a-16637a2ef149", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580a93bd-e3bf-4401-8b20-61c6cc6a39b8", "sighting_of_ref": "indicator--f535a933-bc02-495e-8a14-55409bc19bed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9312335-1cf9-4baa-b28c-8e62b6d7d3ea", "sighting_of_ref": "indicator--2e748227-84a0-4e8f-867c-55e702439c27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067fb0f9-8611-41a2-bdb0-cf384b81607c", "sighting_of_ref": "indicator--aff41409-9024-4440-83d2-1a227050ab12", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6314512a-2b86-4c71-81e2-bf328aa8d376", "sighting_of_ref": "indicator--dcf1a6bb-bc1c-492d-b34c-3f2d9218dc0c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c20b63-b328-4259-9508-daf2135bd4f1", "sighting_of_ref": "indicator--dcf1a6bb-bc1c-492d-b34c-3f2d9218dc0c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd7d4b4-e082-493e-a162-82bee5a869a7", "sighting_of_ref": "indicator--4ef7d869-4cec-4293-a46f-cd03bf588c7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1f9ab-911b-4ef4-b030-09590f3186d9", "sighting_of_ref": "indicator--30e1a8ff-ca9d-44c4-b450-79fa4adc8283", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b38640-efe2-4420-94a5-17570b04522f", "sighting_of_ref": "indicator--ace7947d-26cb-4e06-ac38-986df500d58d", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff1c3aa-2089-4a0e-b2ef-534e07cf588d", "sighting_of_ref": "indicator--379781e1-5a8c-4cab-86af-cdd23de604d6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc19049-a1b2-46e8-b832-be22eef556ec", "sighting_of_ref": "indicator--e5578d77-71b4-4174-a802-ba96183c057a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ec876c-e80b-4ddd-9851-56d3c98f9da8", "sighting_of_ref": "indicator--2039b482-47ff-495c-8014-2a152632c6f4", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a462bd59-96f6-4742-84c0-97bdf57cc5c6", "sighting_of_ref": "indicator--d894833b-acad-4cf4-8c1c-7a64a49943a6", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af36a7b-b1dc-4e74-9efa-7abcae682f7f", "sighting_of_ref": "indicator--426680dd-cfd1-4c53-9861-772c495cddf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace9370b-b1a7-4f7f-aed2-d2442467ace7", "sighting_of_ref": "indicator--659f2a31-d138-4844-944d-e2c86ef3b890", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae25fb2-2947-47dd-a497-6e5a1d7a3cfe", "sighting_of_ref": "indicator--725182e6-6478-46d2-a15d-f7bd4a28a2bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c447d956-c763-444c-a2f1-35ac0e478ff5", "sighting_of_ref": "indicator--70d244cd-c8b7-4fcf-b6d0-02ade3e8b20e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e304dea7-a5e0-45e5-8f29-f61eab18d4bc", "sighting_of_ref": "indicator--63877678-6122-484c-9b41-cb2b89e48252", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b223678e-e4b6-47d5-b3d2-0138fbe05844", "sighting_of_ref": "indicator--e06a0a57-9333-4501-ada3-91fb76bc3c20", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63a1a20-4229-404a-b7c2-d90bb418ea03", "sighting_of_ref": "indicator--d86364f7-331e-47bb-b78c-05cdc975574f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85170b6f-7ab9-4f09-aa7c-7703b8646b9e", "sighting_of_ref": "indicator--feef25e8-f42e-4e54-ae3e-f8221932aa55", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8462ee2a-aa0c-42e3-a2d3-0563a38ffffe", "sighting_of_ref": "indicator--543c253b-94b6-409c-8b23-446c8195a2d5", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f162264b-5b53-499c-a0e9-3283b71c88d5", "sighting_of_ref": "indicator--25c856b2-4f7d-475a-be3f-13812e7b84c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d3c65b-0a15-4702-a4c7-ce045d57f455", "sighting_of_ref": "indicator--f380506f-4b01-4d88-86b5-72ada5a2af56", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618dddcf-dce4-4a9c-bc57-42aa70b3eaef", "sighting_of_ref": "indicator--993be262-743d-4e0e-8455-5a51ab4083e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132743dc-775c-49c8-9a01-d7bd9c3ec2dc", "sighting_of_ref": "indicator--d0558a98-d368-4d1d-92c2-0761ee5d777f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cbde8-a098-4f7d-aa16-bc36423ed693", "sighting_of_ref": "indicator--6334b7bb-574a-4248-8b1d-61fa4df21d75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1d1524-9515-4c85-8e78-8ea753ca5377", "sighting_of_ref": "indicator--8c6b398d-be96-4156-9651-f9a9ae121ef2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672294db-14fd-4a20-8666-1c4508781637", "sighting_of_ref": "indicator--62728a73-6fd1-444e-9be4-0df14ae7a2a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3db329-31cc-49d6-8612-f667392e4fdb", "sighting_of_ref": "indicator--efb2b28f-25c0-44f7-8aeb-aa7ec9ffb8f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3673eadc-73d5-4f81-a1d0-9b5f55f40dcd", "sighting_of_ref": "indicator--938fda56-7876-4557-8392-948d2aa5353c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfefa24e-c644-4a7f-968b-945563dfdd6c", "sighting_of_ref": "indicator--1ff9d59a-24a8-407c-9c1b-f2a65878367b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5b9228-e3d2-4aa9-8e7a-c69eaac5d0f0", "sighting_of_ref": "indicator--e0ff4bca-500f-4712-9a5c-f74ff5fdaa17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d337388f-3e82-48a6-80f4-c72621c12bcd", "sighting_of_ref": "indicator--7b3cd42e-07e1-4a46-a463-a0d60cbf6d4a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74218186-33d5-4c9d-982a-3bf08cdbd446", "sighting_of_ref": "indicator--b3c6a504-22e5-44ca-93ff-99d592d77370", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d3a9ca-bc8b-4389-8f74-f056716e7f70", "sighting_of_ref": "indicator--c44fa438-9c7a-4fa8-b55c-0bdd32e63beb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0dab28-6bb7-451b-8350-13b3fc48475f", "sighting_of_ref": "indicator--9db9e4a9-65f7-41a4-970a-19a18c102763", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0475c525-403b-4f88-8eb4-bd43128b1fc0", "sighting_of_ref": "indicator--39dc51dd-05cb-4782-b991-158fb67e6c1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50d51b9-0cf4-4e62-9969-62b5df50f62a", "sighting_of_ref": "indicator--b4705414-c6af-4486-97ba-94a107fae006", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516197a2-fd9e-4fa7-92f6-d1d1a7d84407", "sighting_of_ref": "indicator--18c1e0fa-b8c4-40b3-b841-0a88b179d8aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b083638b-8079-498b-8c45-c226408eca82", "sighting_of_ref": "indicator--dca80dbf-8a8a-4208-b1dd-745666c071be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d3218-7344-479e-9667-b7687d2f47c6", "sighting_of_ref": "indicator--00afdb9d-9d02-4a62-9c3e-f68402517ae0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d860309-5272-43ed-86af-a9746afba0b8", "sighting_of_ref": "indicator--e45d806e-558a-42a3-ad24-c374e148e7f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103df718-9e2e-4cda-a607-1988acb0b12b", "sighting_of_ref": "indicator--5805e085-4aef-45c3-b7bc-c72c42fd5052", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0b0540-14e4-4bc4-8286-f2a2ef35951a", "sighting_of_ref": "indicator--9016eff6-ffb6-412b-ac08-054e67a4d3d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb965ce4-a4f2-4be7-963d-7adf82447734", "sighting_of_ref": "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb8c98e-c35d-490f-b0e1-c58ec9823955", "sighting_of_ref": "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3247fd6-0395-4de5-b3b7-1bd8017a2291", "sighting_of_ref": "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5eb2e6-c350-4f63-84cd-fcb73819c4b9", "sighting_of_ref": "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fcfff0-d6c5-4cf2-96b6-ec4e89b40f10", "sighting_of_ref": "indicator--5d081604-065f-4016-9a0d-26effe9fde35", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6a28c9-3ddc-43ca-9c8a-aa9ea8ed801f", "sighting_of_ref": "indicator--33b546d0-09af-4d64-b8ee-c98d7177f9d5", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3934ed49-95c0-4d5f-8897-1328f502ab2f", "sighting_of_ref": "indicator--7fef286d-dc9f-478a-8a5b-b44f79a4e9e0", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f35aabd-d2cc-419d-98cb-985a53478f30", "sighting_of_ref": "indicator--7fef286d-dc9f-478a-8a5b-b44f79a4e9e0", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d5b887-2d7a-469c-93ed-da5ec326a47b", "sighting_of_ref": "indicator--9abb69df-faf6-47ce-a5ef-c6ea842a3beb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08d0843-3dc7-4e93-9b89-65de4e4569fa", "sighting_of_ref": "indicator--8bf91141-bb84-4740-be79-b04a7d945f0a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81eea898-69eb-4432-992b-2e47b5543c27", "sighting_of_ref": "indicator--345be22d-d31b-4984-9ce6-23f0b953f1d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36d096d-4cec-499d-ad86-66004553824f", "sighting_of_ref": "indicator--91d9e41a-84e6-4921-b20a-4e6936256833", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61a736b-1c94-4961-8535-f0f4cb15003f", "sighting_of_ref": "indicator--e2ce4b9f-ffae-4ca7-8f71-fe46587cd6d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eeaf68-4a91-4dc1-b0c7-ac0ec5a49896", "sighting_of_ref": "indicator--69056357-8149-421e-920c-0fcdeedf272a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c2cf9f-8792-45cf-b249-cd2c8de6b7d3", "sighting_of_ref": "indicator--3132d340-7aee-42ef-b8cc-6cd6508b9f81", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb654c3-f714-4518-b9d9-281e7c535ed2", "sighting_of_ref": "indicator--eb30501c-3260-4dae-bb08-363662f76b53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aea4641-9086-47ff-9023-1eb858ccc4af", "sighting_of_ref": "indicator--d2289746-5bef-425e-b436-09bea21ca929", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c43efd6-d687-4514-ae61-d9e62a0ef033", "sighting_of_ref": "indicator--b7053c22-3e05-4429-89cc-ebd10ccdd645", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fe6e53-cad0-4dd7-b6cc-d2225f6d3600", "sighting_of_ref": "indicator--eaaa6c9c-e9ad-4446-ade6-e59bbcddb45d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66fd855-58ce-4a8e-859d-5be61d50d618", "sighting_of_ref": "indicator--132e99eb-dbf5-4d54-9547-a01eed8abf09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc99063-e30b-4ea7-bfdc-56413e3848d5", "sighting_of_ref": "indicator--cd02d3f7-bcd3-46b5-897b-75ec63a0f6b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6461784-c209-4e7e-9d61-e396046d878c", "sighting_of_ref": "indicator--cbb5a1cb-31f3-4607-b230-bfc2e15dd162", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3b0202-60ce-4506-b1d8-28c8fbb1e747", "sighting_of_ref": "indicator--10f764ca-3272-4680-a9eb-0fc38fdf639c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738e8064-42b9-41c5-a886-255de4aa1ca9", "sighting_of_ref": "indicator--bb42c36c-0e42-45f8-8a97-d1b5b766ee15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01f8b20-30d5-46ed-bbc0-cb2cfa50cf9d", "sighting_of_ref": "indicator--921c7b84-8fcb-4fb2-8a9a-9053a68157fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32b3aa6-8908-4be2-8194-cd57a95f141b", "sighting_of_ref": "indicator--c9f68471-06cb-4ca1-9e05-220b2b34a855", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8ae8d6-ef9f-4cb9-b858-d7d4219e2f76", "sighting_of_ref": "indicator--b627af59-2dba-4149-85a2-7b460a75db83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab982db-f50a-44b2-9caa-afa513293c77", "sighting_of_ref": "indicator--17e8882f-1c0e-4184-a9ec-0c0c5927320d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fb57c3-a851-4190-bef5-5a6c1e8185db", "sighting_of_ref": "indicator--fc91fa5e-b4d7-4400-bda5-b32e64a980bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d1d543-a76d-486a-b21f-e1de8e36d5fb", "sighting_of_ref": "indicator--3cb0cc1f-ffa8-4d41-995b-b1c3c133f5c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62a401c-7714-4bd2-bd9d-73290900c345", "sighting_of_ref": "indicator--140735dd-579b-434b-b21e-f287efd7c3ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705a8e1d-df4d-45f2-ba12-8a73d6428f65", "sighting_of_ref": "indicator--f29b0d64-5333-4756-8d3b-e89a8117e2a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e3838-79ab-4334-828f-9873d6c733e4", "sighting_of_ref": "indicator--809bf960-20af-422b-87af-bacdf96fb857", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fd6e09-5a4a-494a-82cc-e1f268bc882d", "sighting_of_ref": "indicator--1629c54e-9f33-40ea-b752-00fbcbede09f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a8e679-d68c-425d-9b25-03b8ef116c6c", "sighting_of_ref": "indicator--ea96df6a-ae38-41d4-91f0-d1dd52e5fddf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e61f5-e930-47db-abce-bb5ef7244546", "sighting_of_ref": "indicator--88195762-25b0-4386-9a5e-672173233257", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4669f902-3f3d-414c-b346-2e868bd323dc", "sighting_of_ref": "indicator--47bbb8e7-754a-454e-a270-502dd3f3a84f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fecea0f-9a6f-4172-af35-baee92fc1b06", "sighting_of_ref": "indicator--7ea39aea-bc45-4d7c-a6b3-bf592991271f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9becf42c-5e5b-4600-b6a5-a8cd76d0b31b", "sighting_of_ref": "indicator--66df493e-e7e7-4aae-9a53-c6ba0cd5d817", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666f25ab-236a-4ddc-ae58-17bcf1b94c1b", "sighting_of_ref": "indicator--e8dda8b6-a41a-42a2-9250-d46616cb7ada", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5e682-ab33-40a8-a441-c40a49740861", "sighting_of_ref": "indicator--b3a906b2-db59-4698-9fc0-05cce5249003", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e8c028-8554-4802-96f2-b4060d81f3e1", "sighting_of_ref": "indicator--cf672c71-a9df-40ab-94c6-1e6a3beb4ddd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7790119-77ff-465e-a3b8-1285553111c9", "sighting_of_ref": "indicator--562dd7ae-b1d6-46fa-9399-f409c139112e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d6a131-85f6-47c5-b8b6-ea1249f2869c", "sighting_of_ref": "indicator--ccb1edae-8075-406c-bc48-a8fc9fbbe508", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f532529-001d-4fed-b084-25abb81763e3", "sighting_of_ref": "indicator--c72a9546-f40b-47cd-886a-7897f61a1ee3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1deda12-e98a-47ce-9df8-0a17ddde104b", "sighting_of_ref": "indicator--4c8cb7ac-1257-4d44-a476-db970a103961", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca853a7-448a-42ad-8228-f6b0bd544ac4", "sighting_of_ref": "indicator--0fb5edd1-654f-4295-9e5f-6d0ed0051021", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f84c46-ea20-4120-af10-77ea7c137557", "sighting_of_ref": "indicator--eaf4e345-295c-4427-92c9-e5f8ed43e5c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4359eec6-86f5-44b8-a993-8733e9fc25b4", "sighting_of_ref": "indicator--998739c8-128c-4c97-887f-e4f44e56fb74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1346b3d1-fdf4-426d-ad6f-910ccf36c422", "sighting_of_ref": "indicator--5866f792-ceed-4e45-bbee-89ab1bee1958", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0fd736-bfae-4978-ae40-40e2712783f5", "sighting_of_ref": "indicator--5e5c7d1b-a6f2-48c6-90c8-4d430693cde1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605c680d-7c34-49db-bf20-3fe7b17488e3", "sighting_of_ref": "indicator--9562e205-5748-4176-8bae-f4284a4863d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33291811-ccd0-46a6-b7db-f2a92294e6ac", "sighting_of_ref": "indicator--c2635da6-33a8-4c11-88cc-165a814ae7c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdeb92c-93e9-414f-853f-110f18a208db", "sighting_of_ref": "indicator--65c919ce-49b9-4a1b-9f08-9cdc4f836dbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb4c73-dad7-4744-98e2-8373e8473b97", "sighting_of_ref": "indicator--f84fe7e6-a1dc-41bc-8f8f-9b0e3632a9b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b280be48-6dbc-40df-ab47-b123afd44e0e", "sighting_of_ref": "indicator--18dc9ebf-06e2-4444-8444-146f02feb73c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658a26c-0655-4391-bf91-2b67bbf3b1c5", "sighting_of_ref": "indicator--aca71839-241c-4634-8bfe-1be9c22dff63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c234a8b-185a-4f5f-8b76-37c1042b22b7", "sighting_of_ref": "indicator--6c2cc4a7-5415-4101-895d-5494b67a20e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f087baf-8a31-499c-a7fe-fb26b97820af", "sighting_of_ref": "indicator--dfeb83ea-3371-4723-a4b9-2abe68463962", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36db7655-d17f-474a-8e10-4fc2aab5cd86", "sighting_of_ref": "indicator--db0265d4-b255-4b9b-bde7-a7d7400ff068", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e799e8-bd75-4b70-9808-f010f210386b", "sighting_of_ref": "indicator--499029bf-7e04-484f-a23d-3cd7cc2bdc92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56229ddb-e279-402a-b190-0db618061b30", "sighting_of_ref": "indicator--ed751540-ba88-4098-a687-09828284e950", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9926eef3-154a-4f04-861a-e4099975e7d4", "sighting_of_ref": "indicator--3a7c5fdf-a47e-48d9-a532-e9b69e60b495", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a460bb-ba7a-4a2a-9c22-721708ab752e", "sighting_of_ref": "indicator--9d0d3b41-df8d-4a47-9bb2-4785cb292b96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205c836-a31e-4b9a-b7ae-08f4f77ed378", "sighting_of_ref": "indicator--a492b62f-1b30-4c00-ae67-5b34b1377e8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac097cb-b4c2-4ac8-a962-13a82d919e4a", "sighting_of_ref": "indicator--4a11615d-1bbb-40bf-aa03-650476f44a2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd36ec4-5663-45a3-9025-299486f4c96b", "sighting_of_ref": "indicator--d24235a1-823b-4e16-a3c3-6eca057a30eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bb03a5-b6ec-44e9-806f-210ddec12193", "sighting_of_ref": "indicator--88123e18-d176-45ef-9c28-ecaeb5c2f2c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd3b7da-59f0-4c78-8c4b-767dc5a65410", "sighting_of_ref": "indicator--037e3152-a2e2-40fd-93ab-27783cfb8362", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeecce9d-6c42-418f-8fee-4acc07556250", "sighting_of_ref": "indicator--61df6683-259a-488c-aaeb-b8ee1fa0f651", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d808450-70bc-4268-96f5-3c941eebe407", "sighting_of_ref": "indicator--d4edb14e-8b07-4617-812f-646c6abf3e06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a306ff3d-6b55-4663-82c5-5f5fb54f8589", "sighting_of_ref": "indicator--03815a86-1533-4b59-9839-1c061bc5777c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938aafe7-d7e2-4010-94af-a7a8909c0573", "sighting_of_ref": "indicator--12cc9be2-b085-4732-815f-2a1880f69b83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e182097-c5eb-435b-a240-203f8626edb0", "sighting_of_ref": "indicator--4a73db14-76e9-4214-a72c-b41e68ee19e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0952686-cf4f-45b2-90c5-1bcfd486eb4a", "sighting_of_ref": "indicator--5c3b6134-e928-4f8f-8fd0-001a90304d94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8361e6aa-b119-4b48-b0ee-e09f3101d965", "sighting_of_ref": "indicator--74520958-d8e2-4d63-85c3-d1b9dfd0b1dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0959db2-8c45-4660-81fb-26112b2a55cd", "sighting_of_ref": "indicator--168911eb-751c-44c6-a71e-3fb817a62aad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561aaad7-d14c-4261-adc7-6003edaf136b", "sighting_of_ref": "indicator--04c1b02b-5cb7-4830-bb1c-643c11e545c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9203ba7-038c-4c2b-a8c1-2417b4f6b76f", "sighting_of_ref": "indicator--48911b57-1007-4b91-ac78-7d662b1cea09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04574c1-9799-4d6d-9aea-5e5b447e1d01", "sighting_of_ref": "indicator--8e8bc89f-940a-40a8-8a37-174252aad402", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c797c9-72f7-4e26-8e00-46dcec8bfb1f", "sighting_of_ref": "indicator--f6d9e952-0f9b-45bd-b41e-fac7dda09fcf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d9fdca-0cdc-485d-be0c-f4f4afc53e4a", "sighting_of_ref": "indicator--2889f478-7f3b-401b-b87d-55c6a953cc29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e778550f-9127-4f80-9733-322e1ad49485", "sighting_of_ref": "indicator--1fd21d98-8619-4ba1-95d0-c360f715e200", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e5a357-90dc-40eb-ba6f-b34988c771d3", "sighting_of_ref": "indicator--78a11f67-df4f-431e-b75d-86b34da65197", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b658f5f-3a06-4ae5-9946-dbcdb1b27e49", "sighting_of_ref": "indicator--76d8d6cb-dc38-4279-816d-a492643424e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acab4fca-633c-411f-b5d2-9ae92243a28c", "sighting_of_ref": "indicator--7afbbe65-b558-4df7-bb00-b45fb99e0e4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9d3d09-5139-4e0e-a128-d09b421c97a7", "sighting_of_ref": "indicator--0f66213f-facf-4317-a5cb-7473cf89d985", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09f6336-a2ea-44b0-856d-59e80a440631", "sighting_of_ref": "indicator--074e3331-bf11-48a9-a286-25b3e637a341", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a305be7b-de86-4458-bc1d-8ec5ff8c5058", "sighting_of_ref": "indicator--44384045-7dd0-4283-b137-e60d421bddc8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ac4538-14ea-4ad2-8a3c-13b9a92bb6a3", "sighting_of_ref": "indicator--e682b9c0-1ee7-4161-99b3-50d3a205c9c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1817bc-ea27-4b80-8e54-c7495f1c378b", "sighting_of_ref": "indicator--3dd34744-6d81-44d5-9ad5-4354d454279c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66e87cb-426e-47b5-995d-f7eac9334d27", "sighting_of_ref": "indicator--0e3c9af8-2d23-41e9-a1b3-a9ce35edf748", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f685d1-b9ec-4333-ac56-f8a22fd8fb88", "sighting_of_ref": "indicator--2bdf142e-14a0-4f87-9202-b2141b89bbba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4a88e3-7f7d-4641-8f9c-666c39766fc3", "sighting_of_ref": "indicator--6990c905-d819-4aba-bd83-a71b48b0ed10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013af8ed-a29e-490d-b5be-3cb9e77a0b66", "sighting_of_ref": "indicator--26e734ee-1ffb-4052-af43-d241630772b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22985a1-80cb-4363-8dde-32750318d89a", "sighting_of_ref": "indicator--96628885-602e-424f-a19d-57939c43fb51", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ed02f5-8583-46e8-abcd-e987d8270f50", "sighting_of_ref": "indicator--59eed8d8-8744-4c6a-9be6-e6f160cf91b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8851c8d4-bef6-43c6-814f-34645fa073cd", "sighting_of_ref": "indicator--9f9842b4-d6eb-4539-8edb-8fec8239bc2e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8eb2f3-5d0f-4174-b993-654371a12592", "sighting_of_ref": "indicator--5d773f34-b668-47fa-a3e8-2da5bf352464", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88620007-76af-44a8-b016-1eedc61d240a", "sighting_of_ref": "indicator--edef1a67-48c4-4f4e-a4d8-6e63a5ce8b15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e8e627-0fd2-4acd-af56-ae9ef14bec34", "sighting_of_ref": "indicator--5773cbd9-dab7-437c-b067-21a032a48d75", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a6df92-d318-46fd-bdf5-6fe1094d5226", "sighting_of_ref": "indicator--7ad395c5-b594-4259-b070-7410e62e7320", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711d682f-0730-4d9a-9c6b-e8fad7b49442", "sighting_of_ref": "indicator--a27f6be9-f214-4e86-b35c-7b165cd3f7d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdd2801-8a8e-45dd-a1c6-cba52e36d563", "sighting_of_ref": "indicator--7dbfcaca-3109-4992-b154-faed808f635b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2bbf3e-6ef2-4e08-885a-b6db0d989b1e", "sighting_of_ref": "indicator--084e5e7e-6413-4d7f-9fa1-7432840fc9fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724bf0e3-6f16-493d-91e1-d0f9c0805790", "sighting_of_ref": "indicator--7d86b3ae-7c40-4868-b08d-a16881172663", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc972aa2-a4d0-4c32-8435-df7d1b714358", "sighting_of_ref": "indicator--a17dca50-b282-495f-85f5-5c140e3e09d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf03c5e2-bc08-4db6-b6b0-be70b2a6cc23", "sighting_of_ref": "indicator--f8b51408-473e-44c5-b41c-41bb8e8ff907", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49902677-d1be-4176-a3f2-63f0a5ba7077", "sighting_of_ref": "indicator--5d091e7d-db67-4731-93be-817cbba640fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0963fd9d-ad03-4545-8f64-1fb73cc83224", "sighting_of_ref": "indicator--194e959a-5355-4ebb-930b-632c42a18dcb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3eb8cb-8084-4b07-9fef-851670cbebe7", "sighting_of_ref": "indicator--c8f417c5-01d2-4e4e-841f-4fa00aea5677", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc79ff0-aa3f-4c44-b3b1-e161989135e9", "sighting_of_ref": "indicator--03e69646-1df4-4858-881e-f2f92fbc265a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0291d25-c811-4007-befc-503202389f57", "sighting_of_ref": "indicator--a8cde9a8-eae8-4a17-be21-400331ab56b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe453eb-67e9-489e-9db4-0d8173d46689", "sighting_of_ref": "indicator--b7696d1a-3f88-42e6-b874-a1aa64fe7d31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037ca1c8-17a6-48b4-8b67-e1db38211194", "sighting_of_ref": "indicator--f2c13cb5-a3b5-45f9-99ff-6f67f6a38cf4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97efd8c-3612-44cf-8218-6283a102a8be", "sighting_of_ref": "indicator--66959b03-04a8-4cc7-884f-3eca4258305e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd266e7-8ead-4b41-9b69-9144638d5d2a", "sighting_of_ref": "indicator--7eb6c1c9-a860-4d41-bc02-1a63b7e8252c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f9437f-0267-4645-9a31-575eeb5a16d7", "sighting_of_ref": "indicator--48ba9996-465d-44b0-ab8f-90498d3dadfa", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42edfc0-5fc5-4bcb-b18e-9e95802bac87", "sighting_of_ref": "indicator--d79f9020-cdac-4c3a-aa31-4476a6874c82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbcec24-d181-436f-b2d9-9fbe90c646da", "sighting_of_ref": "indicator--e5e4da29-514a-4c81-a140-da9a7f80173c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f38446e-8b6c-40b5-92da-11a89e066b44", "sighting_of_ref": "indicator--3650cab4-66b1-46d3-9b75-74c33f0fa16e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06379d10-33c2-4340-8440-b3c40827e2ce", "sighting_of_ref": "indicator--bf15bc08-e105-4681-bd02-251afc229ce6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ce8681-1249-428b-8f70-c8b7ff79bbf6", "sighting_of_ref": "indicator--6b0cc7f5-122a-4239-9a4f-7105424119bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e5d180-2f62-40e3-b554-76a340809345", "sighting_of_ref": "indicator--4eb46bfa-6837-4424-a86e-c619a203232a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0e301-e9e2-430e-ac9d-8d33b0f14971", "sighting_of_ref": "indicator--a0af0acc-1cb8-4d07-8f6c-5000cc3964a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e67e11-b04d-41b7-8e03-f2dbfd2b0cea", "sighting_of_ref": "indicator--260beee1-a3c9-46f8-9b25-004cb20c501c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6769dc74-bd40-4271-87f1-f5ad67eec285", "sighting_of_ref": "indicator--6dae1a0d-2886-4fb0-84ce-c668f49c70f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44292c83-2d4e-4430-a97f-eab92067c56d", "sighting_of_ref": "indicator--999e0bed-2ada-4594-96d2-a62cfc57c0de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40193a-828e-46dd-a741-c9752189b3a7", "sighting_of_ref": "indicator--f4fcf902-1faf-45e6-97ad-07638aae6e09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ffe8ba-4b62-45d7-8b09-b41c4ec8f5b3", "sighting_of_ref": "indicator--82154b96-0204-438c-9dc9-08524bf523c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a53e13a-3298-4488-97d4-ca7c55a3610f", "sighting_of_ref": "indicator--4a725ec3-3e22-488a-9d76-369ab991703b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5c7e85-e0d3-42b1-816c-aa3803b6f985", "sighting_of_ref": "indicator--126fa013-1957-4950-8a65-d796f5ee055d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6a5a6d-572a-4ef3-9b9b-c12758999610", "sighting_of_ref": "indicator--7767235b-3490-4200-aa25-016f1b5749e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7d534c-5470-41a6-ac68-9f3f8aa3726e", "sighting_of_ref": "indicator--d0dee1cc-b413-4293-89ab-ed5187ef969a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d90ed6a-82d2-4304-af4a-c401660bba00", "sighting_of_ref": "indicator--332f9ece-74af-4099-bd32-d9f2f8589348", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396ea24-fcb3-4adc-87d4-28f21ecfe99a", "sighting_of_ref": "indicator--b529a927-084f-43f3-8b2a-862f411d3c48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0833f6ec-7498-490b-8685-b0e8cb849b72", "sighting_of_ref": "indicator--64a51555-bba8-4a3f-ab41-5b6d1471bc5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aefeb1-6fa3-4194-a383-8ad2eb0ff466", "sighting_of_ref": "indicator--c48ee1a0-fc79-49dc-abc1-c3a9db4b3658", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71d89ac-c905-47e2-92e9-87f5dabca84a", "sighting_of_ref": "indicator--73990daf-89ff-45d2-ac66-9d55c91ce0ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a4452a-2291-44c8-a3da-ab40648888cf", "sighting_of_ref": "indicator--eda11fda-0d55-4300-a9f6-ac765f1a6067", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6ed794-ba33-4951-969e-2a7ef51a4c22", "sighting_of_ref": "indicator--bc67af5b-46a0-40c9-90b2-c829ee8944a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64055b2d-7e71-4301-a70c-5645a020013f", "sighting_of_ref": "indicator--d301a62f-6495-4663-b6c9-d93f32f8132f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3018f774-1e38-46aa-ae46-812b513cf705", "sighting_of_ref": "indicator--7b4a376c-9b4d-4fcd-ad01-e92f912ce413", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe50af72-d41b-4dc1-b33c-3119a046727c", "sighting_of_ref": "indicator--eec21dd6-db20-47e9-ada8-b10476c9bfa4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca9178a-2bf4-4881-9e93-eb982644d169", "sighting_of_ref": "indicator--9e645ffd-4c7c-4265-92fe-3a051ddd2ee3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde94c8e-5875-435a-bd79-d3460843927a", "sighting_of_ref": "indicator--76c6683f-3ef1-4d1f-9464-26cf8b0ecd61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a63e37-3d5f-4984-9abc-315ca16118fb", "sighting_of_ref": "indicator--57c77243-788f-41e9-a5a8-367134dd3bb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8813ec-e69f-4c16-9628-d7f44c58b19b", "sighting_of_ref": "indicator--15d2b4be-b90c-47f7-a04f-5db02b8be992", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb02fac-b65b-4de8-a699-697adead9fae", "sighting_of_ref": "indicator--2aa442bb-a03c-4b88-a4aa-08ad4bbdc123", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff49d85c-256f-4074-9edc-b42d01c4b2e1", "sighting_of_ref": "indicator--a01e54b1-9aa6-4dba-9f8b-f4820d6a8dc2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0384ab68-4f85-4a6f-8f3f-17cd996f9d7d", "sighting_of_ref": "indicator--ccc5e3a4-b102-4f5c-9a88-6e95a6d32f1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be03a742-dfaa-4221-ad95-7b13e8314ae9", "sighting_of_ref": "indicator--c2eda613-a162-4de6-af1a-7058a110ba69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569a547a-0fb4-4ef9-917c-2f6e6b49a0fb", "sighting_of_ref": "indicator--85a654e1-fb78-4d47-9394-40a63057bd38", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adb36e5-b19a-4e98-ae22-0f065c784e8f", "sighting_of_ref": "indicator--96724d45-b7cd-47ff-8982-7fa2a63d8072", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1dd6d6-bf71-4ff5-96e3-098b46480f89", "sighting_of_ref": "indicator--270b5d34-ecea-47e9-8a90-b7744b06ee49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf6810-b2f3-4d82-97c5-0a4b7b035e95", "sighting_of_ref": "indicator--ac144826-bce4-4179-b0a4-16f4e2923b3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06069dec-07fe-4941-a860-6fdede03972a", "sighting_of_ref": "indicator--8cd07352-ab4d-450e-8c08-f85419e6d8db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126b9fc3-7234-406c-b371-a7c8c87c4ba0", "sighting_of_ref": "indicator--ecb29b36-a25b-4a21-a83c-6f309100c69e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09301001-24cb-4df7-9562-fe6835505d3f", "sighting_of_ref": "indicator--45b1ce4f-22f1-4d74-bd55-1c8728efe2dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d764b1-c624-4aee-9c6d-6e5774f0a1b4", "sighting_of_ref": "indicator--ca033ab0-273e-4468-af7b-306d93e52d9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6daf7c1-520c-40e2-ab68-79931107a609", "sighting_of_ref": "indicator--6007a7a6-59ee-41d9-886b-a510cb1b764c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15f95c2-e7e0-4d49-90da-a5b0dc450b15", "sighting_of_ref": "indicator--ba4cb804-c1cf-4ed6-92ce-d8277fdcbd7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6c0bff-ebcc-48fe-9188-5247e70959df", "sighting_of_ref": "indicator--420ce5a7-6bf1-4235-9924-472e9c83e26a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3823b40-57d3-4cfc-81fc-737499e4a60e", "sighting_of_ref": "indicator--f67d195f-e9e1-40a4-93ff-6c5fdf1e4a4d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b29d92-612a-4a4d-920d-36985fe801b9", "sighting_of_ref": "indicator--62fb9e60-c740-4735-97c5-eb054755f0dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88998ffc-773d-4dbd-ab42-94ad787053c2", "sighting_of_ref": "indicator--812991ae-d035-4ed2-8fae-afe8d4c6b0ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413eb2c2-cfe3-482f-b006-3cf315f864b1", "sighting_of_ref": "indicator--0a1f3aaf-28e9-456a-ae4f-36773ec26272", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90ed359-df66-4fc3-a45c-0ef28e46255f", "sighting_of_ref": "indicator--82d3c89a-e366-4007-950b-ed5a18fa34aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4383ab73-d1eb-412c-8519-98cd9c1322bb", "sighting_of_ref": "indicator--3a2da32c-e65b-48ba-bd0c-3fd318cb44e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bdcf83-696f-4605-8707-bd8288f9f01f", "sighting_of_ref": "indicator--be3f6d9f-37f0-495f-af47-bf7c373768c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37194ea3-01c0-417f-b77f-3b9d81e47eb1", "sighting_of_ref": "indicator--a8ffa06a-a3ea-4f2a-93c4-0e321d5b248c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7919f070-f565-4d0e-b369-67b9a53b19cc", "sighting_of_ref": "indicator--3d3b3eb2-e56f-4152-8c8c-831213c43fb4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8e351c-28d8-47da-9d5c-1fecf5e3e055", "sighting_of_ref": "indicator--da82e280-9837-4e04-b9b5-f7f30aa10272", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c77a7e-0e34-4b51-abca-1109faf80ea1", "sighting_of_ref": "indicator--e8647ea1-2cb0-4b10-bb1d-75876a3f974c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e133d590-9049-4067-8a45-c479b4a99533", "sighting_of_ref": "indicator--044c965d-42d1-4bd5-a2c8-dcfb54daa3e9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22133617-597f-40a5-94e5-529c688d4df7", "sighting_of_ref": "indicator--91418afc-f1a8-4d66-98d6-e3c24ce68974", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7bdecf-b26c-43e7-aed4-08060137ddf2", "sighting_of_ref": "indicator--c725e417-18e2-4d41-b023-c3472a42c856", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c9fa62-461c-43d7-be37-9088bd1dc5ba", "sighting_of_ref": "indicator--a9c5d608-ad38-44d7-b916-e8b0c89aa067", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32912ca-9ffe-469f-9d33-33df971fffca", "sighting_of_ref": "indicator--51ef57b1-ed09-4c59-b172-2941bc8bca9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ec82d4-92fd-4346-a77b-7785e51c748f", "sighting_of_ref": "indicator--f60f40d9-b259-4ee2-a879-bd9696e7c3bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6703aa-4a7b-442c-950d-3af5679d4abe", "sighting_of_ref": "indicator--8415fedd-35cf-4a6a-80fe-3ab99fd074d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4296bb-8b79-450f-94c4-8de42ce99237", "sighting_of_ref": "indicator--912ed173-d1b8-45c4-9dcb-bb4e4d2ec1ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366a6749-8657-435c-877f-7b3dae5dfa5b", "sighting_of_ref": "indicator--0241a8ab-10af-4c59-b655-255c2fba5607", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac47a08-e00e-4df8-93a3-4dd749d860b5", "sighting_of_ref": "indicator--32e94615-acb3-42bb-a3d4-1c2263f97b51", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b23b7-49ee-460c-9cb1-304fe076058c", "sighting_of_ref": "indicator--e79b4d70-7a6a-4648-a06a-32be8c133e8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb9eb09-ab42-42bd-a883-76cea9e900bf", "sighting_of_ref": "indicator--37d14af6-d32b-474f-850e-ee79346a4417", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3497525-c84c-486e-98cf-1b2ae1958c46", "sighting_of_ref": "indicator--503ce2f6-213f-4802-bc94-aaf4460de292", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b0784-74cc-472e-9817-38ff1d6cae97", "sighting_of_ref": "indicator--c7a93857-256d-41b3-86fa-e442855c170b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a999f32-0e6d-426a-8e16-f40306a66523", "sighting_of_ref": "indicator--af2ca157-e716-4cec-8a62-00e4fd6c8d4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95edb725-baff-4a95-b725-360d85fab8c3", "sighting_of_ref": "indicator--eb8e12a5-2cae-43dc-8737-33c075a48eea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efef938c-0bc9-4225-82e8-1f68a9dd965e", "sighting_of_ref": "indicator--e07d6e57-cafd-413c-8995-3dca9b51e6ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a3a93-d0a1-44a6-9081-485dc7970887", "sighting_of_ref": "indicator--91f66b5c-f6ba-4975-a373-58fa97588b5a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba583bb-0362-4d34-adb7-aa7c5eb8b1a3", "sighting_of_ref": "indicator--234fdbc7-2125-4d01-ab1d-cb006ce3d845", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd8b08d-dca1-4c5a-9632-46101c0d131c", "sighting_of_ref": "indicator--d14433f2-d600-45cd-af63-2f1303a591af", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be31bc6a-3115-4695-a565-49f568d31c8c", "sighting_of_ref": "indicator--d4533727-d5cc-44b6-897f-2c85b4a87e7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd62d5b-3cfa-4a58-bd76-1d4487baf091", "sighting_of_ref": "indicator--0870d2c7-94ee-40b9-9e6e-cbccb2ca3acf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed68ce5-1c55-4967-acab-5412f7d34608", "sighting_of_ref": "indicator--fe36f95f-da29-45c2-b054-9566d1842d89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3600107-b31a-4ea6-9609-aece158cce2a", "sighting_of_ref": "indicator--c198ca73-8212-4a22-8a2e-5aaa30cb2a50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49aff17-2048-4c0f-b909-c91ad8262c06", "sighting_of_ref": "indicator--f4b75215-0c61-41a5-9121-8d667a74a6e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9d5b41-782a-4027-ad98-5e128e390df3", "sighting_of_ref": "indicator--38dc8659-c93c-45ad-ada9-3bdced757fec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61a6d58-6a20-4b59-9634-acc2dc912bbd", "sighting_of_ref": "indicator--7e31035a-7b1d-4153-b526-48d069cf93b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb98d0-f86d-47db-a946-7a82ce72b000", "sighting_of_ref": "indicator--f6316211-c6e1-4d98-892c-88a816ab91c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00247690-9409-441e-bfb9-986977be8a20", "sighting_of_ref": "indicator--5cf5bbf3-bbc9-4cd9-a9d6-6e52b703936b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ced3d5-b4c0-4ce7-a042-94f654d8d973", "sighting_of_ref": "indicator--5321151b-c540-45c1-880d-73611aba634f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24163f9-9ba5-41f0-bc69-17117f761147", "sighting_of_ref": "indicator--aa5ab1b7-9d4c-4867-a67c-bc2c864f4eee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d654b066-3e9c-4bf6-97c8-995b9852a644", "sighting_of_ref": "indicator--5604b288-4177-4bd1-8416-b8405b2e1499", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c600b5df-c5c1-4e5b-95be-b29fd9f998c8", "sighting_of_ref": "indicator--40d0ee83-bf9a-4f85-8862-3f782cae607e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60b15cb-e33d-4f70-898c-ca8b4c1716ef", "sighting_of_ref": "indicator--ad057e3f-f4b9-4133-89b3-5af022b4f229", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4855e01a-1896-45a4-8f63-708ff7ef342a", "sighting_of_ref": "indicator--7f6cc527-d253-4240-8b53-015a747f9937", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954a854c-ec18-48ee-9f82-5db6e679ea7d", "sighting_of_ref": "indicator--47e69fb8-f97d-4753-b62f-bcd8bf927c14", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80d4708-d62a-49bf-96e8-b444e28e796e", "sighting_of_ref": "indicator--4d02de3d-0113-46c6-91a2-b23a00595fa6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e0043-d05d-499b-be61-ba4805e760d3", "sighting_of_ref": "indicator--5c2ffba7-638e-4120-bd1c-d4adeebed091", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3703bf81-5394-4224-8078-5ec427161eb1", "sighting_of_ref": "indicator--5c2ffba7-638e-4120-bd1c-d4adeebed091", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54ba614-a96f-4563-bf4d-6b9d5a7ea407", "sighting_of_ref": "indicator--ea9f32e5-0509-4d5b-95db-cce092cd6bcb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2351b2-8f06-4167-bd32-13772723c330", "sighting_of_ref": "indicator--d80e546d-2989-4fb9-8b3f-02ec747da8ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef7fc50-3e42-451f-a298-6961cf3bb420", "sighting_of_ref": "indicator--99ac93db-ce22-4131-a59b-be6e6441c6ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09caa70d-2931-4b97-a6e2-0c63a88da64b", "sighting_of_ref": "indicator--f57686e1-10db-4451-b835-559b3de341c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca9ea32-8bcf-4397-9fe6-b047f8713ea9", "sighting_of_ref": "indicator--2cc3250a-d776-4fd4-9d43-8fa2f6d62a0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546be0fb-4075-4f2f-a532-1abba9fd82b0", "sighting_of_ref": "indicator--bf320367-a8a8-4c60-9f5a-d00ed3e3624d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8dde71-630f-4d84-8370-17ba4febb2c1", "sighting_of_ref": "indicator--cf4a6ab3-8eb2-4e48-9a35-ee82becff9e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0534e5-7801-48e1-b656-fcc79008cef5", "sighting_of_ref": "indicator--e8dc1bc1-4cfb-496c-bbed-8985760a25c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22342125-e27a-4f99-98c9-ec4b0bc971e3", "sighting_of_ref": "indicator--59e97e5d-6586-4636-a77a-a52a1b5f0c47", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e511ee4a-565a-4b83-939a-123b52462fe8", "sighting_of_ref": "indicator--5fc31271-b5a4-4341-b0a8-59c7da44c580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddc9422-c08f-4f2d-ba22-1b3682709d97", "sighting_of_ref": "indicator--6889e698-caa5-45ff-826f-e48b9c7f80fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e93c13a-22be-4b91-a7ec-9d769bea629f", "sighting_of_ref": "indicator--caf061b3-5042-4308-9a1f-6e91012063bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11a2599-c6b3-4f9f-9904-b481f3410d07", "sighting_of_ref": "indicator--29e7555b-6e46-4d13-bc7a-edebf756b134", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b931d27-623a-4bde-aab5-07378da5e74f", "sighting_of_ref": "indicator--9527b8c6-5701-4dc4-a999-87c3bdebfbc5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc7097e-6b64-40d8-b199-27f9b847e6e4", "sighting_of_ref": "indicator--dcf54d27-6def-4575-97f5-19b11caa97f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35370d17-8a5d-4143-b79c-7265c0d678bb", "sighting_of_ref": "indicator--82a73bf8-2ae2-41c6-8da2-eaf53bc78ab1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ede274-3708-463c-aec0-da24b224923f", "sighting_of_ref": "indicator--cf722987-1eed-46eb-a8a3-631c3902931a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c5ab84-6c30-4a5d-aa44-f6b89ecea3fc", "sighting_of_ref": "indicator--85230fe6-9d00-4d52-aca6-fd3fbe6c47f4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eb2999-b229-4e39-a481-edd7df3e5b62", "sighting_of_ref": "indicator--384f1a4d-7b7a-4469-a974-3846c687dd7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead32c6b-6659-4512-9ef6-193e7d3ab2ba", "sighting_of_ref": "indicator--c0a2a437-16c1-4bbb-b1c4-e5249b9e5dcc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe59bb6-9028-4f10-af81-259fb0c4c035", "sighting_of_ref": "indicator--b492a7e4-08ae-4617-83ca-688ccac15bbf", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92429dd8-5c10-4b43-8dc1-6144c44c6548", "sighting_of_ref": "indicator--425771ee-69d8-498a-8fbf-e718eea51e06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2433a4c5-36cf-466a-800d-e92d76c920f5", "sighting_of_ref": "indicator--e7e0a5e5-ea2b-4f1d-8320-b19d481a68c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de85594-9b9b-4f50-abe2-54de4a65d5cb", "sighting_of_ref": "indicator--e26d40ff-b465-49f2-87d2-cffc0868fb9c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b7e56-f9ff-4420-9ebf-f38dba35127f", "sighting_of_ref": "indicator--e26d40ff-b465-49f2-87d2-cffc0868fb9c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcbf9a7-8fb8-4f40-a8ef-e0bbf774adf3", "sighting_of_ref": "indicator--c661d5cb-a7ce-4ddc-a52e-352bf6880ea1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618ea5ac-3740-4e7d-9ee9-0b53b148f842", "sighting_of_ref": "indicator--f75408ff-bf81-4d20-95c0-724f40165d33", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bfc2bf-9e14-4ddc-bd84-3f42788a2a0f", "sighting_of_ref": "indicator--9f6983d1-3439-4dae-9bd3-12d7b43dadbd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0229da3-4d94-4067-b797-c81c8b5ac182", "sighting_of_ref": "indicator--262b6dd9-a800-452d-9f62-0db788596f63", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705dcdf4-82bb-4682-af94-171c643144d0", "sighting_of_ref": "indicator--03ee1779-5b78-4b7d-bec2-d13200270210", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243a6818-69ab-4ebe-83ea-cbcab025b1a5", "sighting_of_ref": "indicator--72f7788b-0821-4861-9372-7ba880c317cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3034d98a-b24b-4b3a-b9fa-39bf1f1815ba", "sighting_of_ref": "indicator--ad9ec3ce-0419-4871-8056-c4992e0b5a9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3078e28-d92d-45e4-91f2-c843dbd6e7ac", "sighting_of_ref": "indicator--e927564c-bba4-444d-806e-6b6cfe553b95", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d820f92-abf8-4ed6-97f7-6cf9fecaba02", "sighting_of_ref": "indicator--b22b9b79-2e57-4cb5-8df7-b8bb3c19d108", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87198ddc-b338-4f3e-a733-09b3b1555587", "sighting_of_ref": "indicator--5495e16c-1621-4659-969a-2bcc41f34102", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e7e33b-04e6-4fe6-b13a-1a72c16dbbc2", "sighting_of_ref": "indicator--4d9b82c8-f3d6-4085-a618-d3e96b1a5828", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45f9302-2aac-487e-8543-9df8cc98068d", "sighting_of_ref": "indicator--91626e8b-7a37-420e-98d8-b33060b35a40", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43425a3-b8cb-420b-9e0d-9bd7c7f5f94b", "sighting_of_ref": "indicator--028ed05f-33a7-4386-8bfa-0de1aa2afcda", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3a82bc-29db-4b13-aa35-3091c9cbd291", "sighting_of_ref": "indicator--35cad0c5-4aa3-45a5-ba73-ec9fe9e9e862", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a03984e-e36a-4785-9b60-cea8ac1d2cd4", "sighting_of_ref": "indicator--6b57b9c4-df64-4dac-ac64-a007e04becfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cad2dc2-5f4b-4391-81ed-d070733e4bc2", "sighting_of_ref": "indicator--c50eb106-1f7c-424c-999b-8dd60a6e3b0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2c8d18-7b26-4b27-9054-61af7d5c9b88", "sighting_of_ref": "indicator--4cfa39de-16f5-45ed-b7c5-f10a18941560", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd406fb-6154-4e93-9057-4e0a66651fce", "sighting_of_ref": "indicator--7bb6a446-8eac-4e55-afab-3af25a197ced", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2629c04d-6f60-48c4-a66c-95b2d867fcb0", "sighting_of_ref": "indicator--152a6f02-1b26-4046-a1ab-bf39836f8170", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d70a03-1286-48ef-bdc7-21e07f1ae701", "sighting_of_ref": "indicator--09423a5c-0907-444d-95c0-e2319cb7c27b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ce0334-5440-4dbc-9ad3-b02db49380e5", "sighting_of_ref": "indicator--a7c50926-fc0b-42b8-96a6-2f9836bfde61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ed9440-aa78-494f-851a-426416946269", "sighting_of_ref": "indicator--843c716b-2adf-48bb-a41a-63bc2503b0cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a718854-65a3-4992-949d-a74c07cf0267", "sighting_of_ref": "indicator--cba67f1f-a953-4c63-be33-05e54ad8e7b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6de1293-62e9-423a-87a3-1b44d95a8cee", "sighting_of_ref": "indicator--f365109f-f1b1-432a-8977-59cf7d35dba5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c40e12-3ed7-48c1-ac44-01f093a4e69e", "sighting_of_ref": "indicator--558d7578-ac1c-4ada-b9a3-a0f076e2aa6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aca493-9358-424e-ab83-ef6a691e964e", "sighting_of_ref": "indicator--784d3a6d-1ca2-4462-9cde-1120a6f40e6b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508f7b32-f2db-4787-ba60-316d6ade4e88", "sighting_of_ref": "indicator--dca36b9a-935b-4418-adc7-00fe6f91ed5c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f441fc6-a5cf-407a-8bca-06033913bda4", "sighting_of_ref": "indicator--828db284-4942-49fa-8f11-1fc5bc453516", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b813e0-1b44-4ef0-a3fa-a7a88416697d", "sighting_of_ref": "indicator--caab34e6-6334-4004-8064-35f660fa9a33", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181ffdc7-f8c3-485f-aa3a-f220279a646d", "sighting_of_ref": "indicator--3e3335e7-d505-4f6e-b412-0e70c6071306", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d2baf9-0c59-4f70-bc26-be72317374bb", "sighting_of_ref": "indicator--3e3335e7-d505-4f6e-b412-0e70c6071306", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14992563-a663-46b6-aed6-a2abe77c6ef4", "sighting_of_ref": "indicator--72bb0341-fa0f-4a10-b372-428d211c4fd6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c6ffec-1838-42ac-b724-35175ecdde72", "sighting_of_ref": "indicator--cc9940db-63a4-4bc5-a633-e1158b01886e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdeaf93-15b4-4a94-b118-3b49bfebec22", "sighting_of_ref": "indicator--88a2be26-1c4b-4d1d-8482-cd54563f1b50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0b2ff0-ea1a-470e-87ab-e867874d266f", "sighting_of_ref": "indicator--67896a09-1821-4370-aa28-6d5fccd64f27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3726d4-5eb7-47e7-abcc-dc6c739ce954", "sighting_of_ref": "indicator--d4a5152b-4e17-4d6a-85b8-a541e2fafc87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72301b2-4e8f-46ad-a4c6-544940827b93", "sighting_of_ref": "indicator--69e747d4-470d-4451-b163-7b01563fea28", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d014e765-6932-4e3d-8fea-9ec1a9414d1e", "sighting_of_ref": "indicator--5e738988-7013-4043-970f-72f287a1bf2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc11ebf-5330-4437-94a3-736f4c4e10ee", "sighting_of_ref": "indicator--49ff1a02-05b1-4ab3-a66f-b4d6e883adf9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12723e8-cc5b-451f-8e12-1a41376d3444", "sighting_of_ref": "indicator--63b53cab-a720-4488-bd07-6fae9e50f995", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa75dc65-72e3-4bb6-a819-9600b8234f0d", "sighting_of_ref": "indicator--87c2f569-efdb-4194-91a7-8a7c6c30cbf9", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc6fe66-5f0d-4289-83df-468dab974edf", "sighting_of_ref": "indicator--d3d7cbb3-e055-4e7a-bf87-18623ce25230", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f14b588-7893-436c-b843-4b000b5ab91c", "sighting_of_ref": "indicator--fd160358-2f11-40e5-aaa4-410dbe392d28", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdf7f82-13bc-4f94-b8e2-aa5535156ede", "sighting_of_ref": "indicator--d617722b-19e6-445f-9bba-b6b99bf9c243", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038a67e5-a572-4b3e-88aa-6731255c24a9", "sighting_of_ref": "indicator--92dc6bf0-a214-4d8f-b694-c9f766565ba4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6402c6c-5ac0-48b6-a858-f7dee40a3124", "sighting_of_ref": "indicator--36c089e2-2571-4c10-a822-a08463e53b16", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c77802-082f-41bf-838b-6f6eaf03ec83", "sighting_of_ref": "indicator--6cd361a4-db76-43f7-8b39-9a17866b1d3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf3ddb2-f6ba-4a34-b79f-f213393888a0", "sighting_of_ref": "indicator--ba9bcd50-14ae-4096-bd04-b54837bf7abb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4816179-cfa2-4011-8173-6f4c460b1605", "sighting_of_ref": "indicator--ae5c9996-cb18-4a84-ac40-c7195878f00e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213ea16-c349-4db6-b71a-597cb3678dc5", "sighting_of_ref": "indicator--ffcb8988-9a35-439c-9d4b-92715f2a2c72", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacee7bc-7730-426a-bf7e-02e02e95abfa", "sighting_of_ref": "indicator--8bc3513d-4d7c-4533-8fc4-6c6ffabff8f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e183ddf-8326-4530-8a94-2112e1cdd495", "sighting_of_ref": "indicator--85156c29-ec35-4b9b-8c01-6e872fe16e83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda55708-7727-460d-8010-029d49b9c703", "sighting_of_ref": "indicator--ccb4da88-9fc5-4fb1-a56d-894d2724a0d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d655218e-2ee4-4f93-86b2-feb38d17cd60", "sighting_of_ref": "indicator--a0859f9e-5da4-4bce-a722-f284abdf6a67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9187b505-50f9-424d-aaa2-70d99fc133ad", "sighting_of_ref": "indicator--fe8d4f51-aecd-401d-91d0-392ebfecc733", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0b0755-66f1-4d1b-ae68-618adb559db1", "sighting_of_ref": "indicator--0abf3446-76a9-43e0-a3ef-583a6aa781ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33d1a69-7938-432b-ba4b-7acfc47e5592", "sighting_of_ref": "indicator--6cf21a86-2b5f-4a74-9262-3a4fe0facad5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1816a3b1-a150-4d3b-832d-5d3f08816de5", "sighting_of_ref": "indicator--9f2c1656-bad1-43a4-a23e-79e0db3f0f32", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9855877-0fbe-43a1-88e8-d08c93653f2f", "sighting_of_ref": "indicator--30000add-0dbd-4f7d-9417-562ad7e95358", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc60d9af-d981-4ae1-b232-6995db378c8a", "sighting_of_ref": "indicator--144ed5bd-c7f5-44fb-a33d-f69c66b11bd5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1091e0cd-0826-4863-b2aa-bb4e19285650", "sighting_of_ref": "indicator--ce154833-17bc-44e1-b056-4e06e60f9140", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee69d9b-3879-4716-9462-bd8845195d8a", "sighting_of_ref": "indicator--2b4f4a39-96f9-4fed-ac8d-b2a993ff1d04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7792d9ec-77a9-4e02-8d42-73c8a34dddbf", "sighting_of_ref": "indicator--288724c6-5338-4c02-bc27-72f62a789c82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9dd4fa-d265-4ecf-99b2-15fb68398d61", "sighting_of_ref": "indicator--1d264231-3d3a-4675-bb02-98da29b748f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bde116-9a4f-41b0-b8f5-a18714fb48db", "sighting_of_ref": "indicator--ecb1fdab-892a-4eb1-b453-2e61fa42015c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61abc97e-1a79-4afd-929f-ba41928a37b8", "sighting_of_ref": "indicator--292aeac1-509d-4277-9a77-24f19e555d52", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec145b1-5f1a-4819-8234-7af58709db33", "sighting_of_ref": "indicator--da9ef4d0-2a25-4330-8a53-2194ffb8d337", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e820801c-b48e-4459-84b6-4cc675bcd62d", "sighting_of_ref": "indicator--de2e948b-5c86-4860-9d84-d23682fc421e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12beb58-a940-4592-bd56-a8af83a5f83e", "sighting_of_ref": "indicator--4c81c82d-1679-4c2e-ae1c-b0269f1b9301", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d633df-d0e6-4778-b8f7-2b9956723b95", "sighting_of_ref": "indicator--b1685fd2-3e0c-4a4f-b938-d72546ba3778", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645adb54-399a-4bcc-9d23-980482c99ea5", "sighting_of_ref": "indicator--99369003-4c9b-41ea-b355-4d3ae65db047", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544d08cc-70f1-42c4-be95-ed2d1f752874", "sighting_of_ref": "indicator--f1c34a97-358e-483d-ba91-1ef96e1a2b2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3d403-7776-4b63-bdb5-0accb0f32cb4", "sighting_of_ref": "indicator--1c7bab26-71ff-4425-8607-755bdc8dcba1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9125944-a4ce-4967-915b-8613e3c9c58f", "sighting_of_ref": "indicator--94f451db-0f79-4dc1-962c-73222f45b2c9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bc3de4-f066-408e-af7f-d151d3b59017", "sighting_of_ref": "indicator--a5a6ec0e-c45b-4d0a-9224-95526e65f203", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2591ea6f-6c05-4b91-9bf5-38a41c5f82c9", "sighting_of_ref": "indicator--76794718-d2c5-4ed6-942f-666f2ec6402e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12507948-4d1c-497d-91d2-4cd7b8bfc5e4", "sighting_of_ref": "indicator--8099c76d-d39f-4d0d-bc81-4a288076467b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f732f8-6ef2-4446-abc7-531e7877351e", "sighting_of_ref": "indicator--e85eb8d4-c623-4093-a8b7-f6aecbd6026b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd5e5ff-cb74-4095-a277-188eec5c3751", "sighting_of_ref": "indicator--ecb5c785-60a6-455e-97cd-eab02696fe02", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912cc161-1a8c-450e-92cf-90f5e91ae593", "sighting_of_ref": "indicator--c534c4c2-0b46-4876-8b82-0fc1336a4162", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3393b2-4dc0-492f-b821-c0e4e0c3def2", "sighting_of_ref": "indicator--3944aa4b-fb4e-4e1a-918b-8bdd95d4d032", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb74be67-2374-4566-812f-0ef20252b532", "sighting_of_ref": "indicator--52c1dfda-08be-401b-b2dd-36fc3e508c5b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c22d6a-e790-46af-b07c-1c5c00b75756", "sighting_of_ref": "indicator--f9a4d411-d65b-4fb8-9408-2216dbd9adb9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45247d6d-fd79-4ae6-8907-0ddef2db8b9d", "sighting_of_ref": "indicator--6f8be673-2f5b-4e3f-8fd6-520c71a3e696", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8b88a3-3287-4350-856d-d12a29a98ecb", "sighting_of_ref": "indicator--a8263cfa-7492-43ba-9f9c-becab93614bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9380dc24-6cb4-4c38-8f5f-b6286eaa8b16", "sighting_of_ref": "indicator--fc4199e2-6cf7-4fad-9e39-0b6185cf5936", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05fbc7e-68d7-41b1-b2e8-d7cd319792a6", "sighting_of_ref": "indicator--90a1ac2e-4c54-4079-901e-22809b6ad4d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59ac2ac-3883-4cc8-9f99-3e91e5dbaff7", "sighting_of_ref": "indicator--3484d113-104c-47a4-b513-fa3a231f8dc8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619181ef-3a33-4661-9b6a-55934d03e14e", "sighting_of_ref": "indicator--ab217ca7-9f13-4591-bd37-5af3e7424d58", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1c4722-3ac3-417d-a47e-b40dde2f516c", "sighting_of_ref": "indicator--035bfc9a-f261-40f8-a581-59f790474425", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13fc4cf-36f7-497d-ba35-149ba2d15a9d", "sighting_of_ref": "indicator--f539a99d-7aa7-40e0-8504-b6667932ab89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237960c8-0494-41c3-82cf-11294ed6f555", "sighting_of_ref": "indicator--4d84eac6-3cdd-42ca-bf71-a7b60b976382", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d718e-21ce-4898-a8d0-b355beadac7b", "sighting_of_ref": "indicator--4c1281ad-32c7-4024-824e-dc80eb889626", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4728cf-44fb-4423-b110-64e2e3db3125", "sighting_of_ref": "indicator--896b33f0-97bd-4705-9b8b-584e76fc31c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e0bf64-8e32-4c97-91d7-e184bf2db8c9", "sighting_of_ref": "indicator--d5a74e94-8721-46cc-8321-7c88527bba9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd2765c-a63c-4716-80f0-c3589dbb79f3", "sighting_of_ref": "indicator--8fbfd083-86ea-4d35-ac10-41b94eb980b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f208efb-6e29-4598-ac6d-fbd2133b6035", "sighting_of_ref": "indicator--7bee2d39-1d6a-4ea7-ac9a-ee865c8bec91", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfb0717-9b35-4115-8867-4fcf63b62967", "sighting_of_ref": "indicator--ac30cd58-eb41-4fcb-91ab-09ff47c90522", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73983f45-5053-4d23-a63d-7c33f7c1c376", "sighting_of_ref": "indicator--0a5560f8-5ac1-4c4d-84ba-37b4c020fdf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf304d17-a3cf-445f-b5f9-eaa18415b5bc", "sighting_of_ref": "indicator--e6c67451-91b6-4f08-8e0e-50e413a9cecb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a49a0f-edc9-4c01-874c-116a1cdbb205", "sighting_of_ref": "indicator--a16a5788-494a-41f7-abdb-6218dda4521b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe52d61-6c33-4e45-9906-9ad05d6918db", "sighting_of_ref": "indicator--397c4055-23e2-4352-80f7-fd251b6ab8ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dd28c4-f5fd-4ccd-a7c1-1f3e8c5d94d5", "sighting_of_ref": "indicator--bf9407ba-58c6-4262-8cae-75dabea3df2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea3f2e6-3319-4c28-a778-ce8e0b47af35", "sighting_of_ref": "indicator--8a5839a8-d839-44a6-adbc-f26d66f05988", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b526d821-4977-412b-9227-a6c61fbc840d", "sighting_of_ref": "indicator--a7fdced4-a8c6-4b05-be57-73306e8960d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3224e94-bb32-4019-8a6d-997ac5775374", "sighting_of_ref": "indicator--e275ebf5-c24f-4058-aa42-e448de7b2e30", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc033db-6d2f-4950-8670-9cbc9d5359fe", "sighting_of_ref": "indicator--a8ca1fbf-e3a9-4e8f-864a-db3b1cc464b1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa08ed8b-59a0-4fe0-b3d1-eafef9ef71fd", "sighting_of_ref": "indicator--2d7eaa70-ca57-44d8-a194-8e8647a5d905", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326e834d-83af-432f-b990-f291a4b18c9e", "sighting_of_ref": "indicator--0f702b16-d093-4217-ab3a-ce8878ffe1e6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e3675c-428f-4491-90d3-73dbd6be1867", "sighting_of_ref": "indicator--f72db346-ef2e-4a78-8560-b961312a4550", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d9e26-d3dc-496b-bf0b-1bd681b5b542", "sighting_of_ref": "indicator--0af642b1-5b6f-43c4-9105-fe86773d255c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d01f622-c930-4b51-87ee-7e91a19543f5", "sighting_of_ref": "indicator--b66e6a16-d8d4-414c-8d92-8e0b92ba6f2a", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aad08e-fbb8-453d-ae20-5e9d7837c5ee", "sighting_of_ref": "indicator--1583ba79-f8d8-4a16-a5cf-23079e6d75b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280f87ae-6bbe-4f71-a6e9-aa18fffb8e9b", "sighting_of_ref": "indicator--25db6009-1dca-4ff4-9439-60d7a1a60c98", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc5234e-d5c8-443d-af79-e91bc3ff22c3", "sighting_of_ref": "indicator--6185c5dc-a961-481c-83ce-1810bb138ee2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b8dd9-e266-4b21-917b-dee203ea5238", "sighting_of_ref": "indicator--8d022257-6ad9-488c-8477-b264565bec79", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdd8be8-b0b7-4244-9090-152e993c43a1", "sighting_of_ref": "indicator--eb500e25-76b6-4290-bf06-7a84ff11427a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb9be43-5e7c-44e0-a535-b041875381ce", "sighting_of_ref": "indicator--5280f25c-07db-40af-b706-bf83e1ec149b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5549666-5957-4090-859e-b75ec6a13166", "sighting_of_ref": "indicator--d2c5f446-8484-4c49-91dd-481cd8a03ca2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0daaa09-1009-4712-b8d9-995804049b8b", "sighting_of_ref": "indicator--499b690a-56c3-401f-a052-1b83a1d5cc03", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfec124-f107-4b86-9b1f-1b50745ee23e", "sighting_of_ref": "indicator--f513dc77-2a1b-459e-bc6a-2bad0ba84f8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e366acb-32e7-46ce-ae93-3edbdcbccd92", "sighting_of_ref": "indicator--422b2e0a-4475-413a-872a-2487b7d5a4be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9777e9-856f-47f8-a694-712a730ad9c3", "sighting_of_ref": "indicator--f47141db-f565-467f-a939-66989d6d0c99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdb9659-79fc-476b-a0c3-db779a757a65", "sighting_of_ref": "indicator--35e0e694-fe23-40e3-993b-a28989358393", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd91fb96-9320-492d-86de-c76cf23ee0fe", "sighting_of_ref": "indicator--fc56b78c-354b-4f5b-ab19-16b8ceb02e4d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc68948-2c8a-4264-8b9d-290d4211d677", "sighting_of_ref": "indicator--beae6f91-cd46-49c7-b3b1-e01180388f1b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b95579-a63b-49c8-8ecf-b9d0379b3258", "sighting_of_ref": "indicator--3a5b6d95-7b72-4e19-bc25-f9b97d3cb0c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07abb854-9149-417e-b6cb-6872c9c66d95", "sighting_of_ref": "indicator--12386ac9-f63a-4fcc-8428-0c1fc89eabf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb243ff-1f05-437a-838b-1aacabe76ce8", "sighting_of_ref": "indicator--7d6e7e66-20a1-44fe-be6d-583379c8f345", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b1c57a-dd1e-4b28-a84a-73738a0333bd", "sighting_of_ref": "indicator--17f46983-c7b1-4493-8107-b7d111d1027b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962e8b8e-0730-482c-8cfc-0b56bb3cc9b6", "sighting_of_ref": "indicator--b708089c-0d36-47d5-ae64-b1c12e7dc6d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eae8bb-99a9-4117-89a2-b5fea25fc25c", "sighting_of_ref": "indicator--b13d721d-445a-4f8f-80aa-1d557af96679", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8323f636-8652-4f2d-92a5-127a093f1f90", "sighting_of_ref": "indicator--b44393f4-a5f5-4591-9daf-5dfac04f3f83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e850bb85-ff60-4fe2-9808-8fe724f79f48", "sighting_of_ref": "indicator--5c84b2d8-5327-44b3-85b7-f9d9ed4c65b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644ab0f5-5ea0-41f7-9d62-72160a65fe9d", "sighting_of_ref": "indicator--ea8ba1e2-0d84-4e13-8dc3-3966f8d879d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c597cdb-33bd-4c52-af4a-bc19ecbd4d8c", "sighting_of_ref": "indicator--6df04c16-dd8c-4df4-8f68-adcfc6ae04ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca6ad69-85a7-441f-937a-b64891e48d70", "sighting_of_ref": "indicator--ba3dcfe6-12d7-4806-b1de-6318d9364f7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc86e0f4-717f-4a16-b7fd-8e1e0eaa1419", "sighting_of_ref": "indicator--f582c224-a8c6-4a34-92f5-7c9b70b43073", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7fe5f2-015b-4415-ad55-4893f44ce874", "sighting_of_ref": "indicator--48d01e80-5fc0-4dae-b572-c25899f539c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062841d9-2a73-4012-a6f9-81597cb7a890", "sighting_of_ref": "indicator--bef560ed-e4fc-440c-a9d4-754559482165", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f871b4-20a6-422e-8745-4389a626dde3", "sighting_of_ref": "indicator--26d0a176-7002-4c89-b5d6-069e8212dbd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414d43e6-0509-4889-8dcb-4a85da89a986", "sighting_of_ref": "indicator--5f51b9a9-bdb0-402c-8794-f680f3c43502", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f8c8a9-2db9-4035-89ec-58ea65da8d68", "sighting_of_ref": "indicator--9dd1e0e8-f94a-4d7b-928d-ca880a77b979", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f66b9f-919f-46c9-9ebd-ed7001d089e3", "sighting_of_ref": "indicator--4f73b1d8-9e5c-4ae0-a034-428a46d9305a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f0254-fd6a-4ee3-9ad9-456240b50e8b", "sighting_of_ref": "indicator--935100e2-f2c2-425b-84eb-e528ed743922", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a79af84-7def-4175-87c5-c92cde05dde2", "sighting_of_ref": "indicator--c2d7a413-af60-478c-ae33-3f8dbc580055", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799abec1-b0fe-44df-9939-16294d5ecbd2", "sighting_of_ref": "indicator--6e870c4e-9902-4f50-8b93-fdd10a3168cf", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6717a8c9-c62c-4213-a4fa-02465c0d7306", "sighting_of_ref": "indicator--af11dd35-ae13-4058-b7cc-3df88ad9a984", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c027a484-6ca8-4535-84e1-71d480567fc9", "sighting_of_ref": "indicator--70ee5755-9996-4a82-a117-ef735177f5b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78efd9e5-a7af-43a7-ad0e-c6b276778693", "sighting_of_ref": "indicator--fdf522ff-ef68-404c-81cf-b1e33cfb2bf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a75662-453f-4211-8ecc-beb8f2b9aef4", "sighting_of_ref": "indicator--8c369fbd-23e1-4ebe-9acc-2b75f6265b54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d8a9d5-c170-4862-9f9d-4fbe590ea7e4", "sighting_of_ref": "indicator--a84237b6-dacc-445c-9518-c479ee16e4f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8403fa72-555c-44fd-8f02-eef1deca323a", "sighting_of_ref": "indicator--20f6851a-3a70-41fa-b082-697ebd75484a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35783a57-4223-440f-8205-fe5b71df873a", "sighting_of_ref": "indicator--aed8f344-61ff-473e-94c8-fedf01f29056", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ac4f58-a2a5-42d0-baf6-9e4b82ceac67", "sighting_of_ref": "indicator--f3c801bc-afff-461a-86f3-bd060531dd96", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce453ac2-9d6e-4603-b1a4-dde64c73cca8", "sighting_of_ref": "indicator--78ddc187-6c8a-40eb-bd72-bcb82201994b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad259bed-5a1b-42f0-af8c-26022fc2dc8c", "sighting_of_ref": "indicator--6409a819-b9aa-491f-aceb-0dd77d9c38a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4084a652-ae5c-43c0-a356-23144b769aaf", "sighting_of_ref": "indicator--131d16e1-210d-4f11-9f1e-504c72ef46cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303d008-aa52-44c5-80c5-8f334e483e82", "sighting_of_ref": "indicator--5ff8eaa5-e8d9-4d3b-90cc-a489583b3cbd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc83076-bffa-4608-be25-b354e4a23218", "sighting_of_ref": "indicator--627a9070-7078-4701-afb3-5b04c2536c7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c6ed8d-dabb-41db-80c1-8956e85727f1", "sighting_of_ref": "indicator--3b2958f9-d114-448a-a9b4-cb337ac9d4de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574053ab-68cd-4e95-bff0-a0d06ee22cb6", "sighting_of_ref": "indicator--8238eed2-fea3-455a-97bd-e44504b556b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1f5e15-92d4-4c3a-9ee5-8130c1a854db", "sighting_of_ref": "indicator--f8f3e507-d8d8-47b3-83d0-b160a7b1b096", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58647b6-4c30-4648-bf81-8a5df325c33d", "sighting_of_ref": "indicator--7d5322ef-f131-4898-899d-ef399cc5e442", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ccafca-03cb-44a9-b24d-15e139549f66", "sighting_of_ref": "indicator--6106d902-9c16-4ee2-ad8c-cc28f3e54265", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c02499f-5b9a-4ba3-b375-069b9b42c714", "sighting_of_ref": "indicator--3303d2e2-a08e-48dd-9a1b-70ba3b0bbed4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c455aa-36d5-46ba-a608-5af4636689b0", "sighting_of_ref": "indicator--51f4f4cb-2449-4d04-bf94-5267d1a75d75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7fe63c-f755-4921-a846-f506653c29ec", "sighting_of_ref": "indicator--00aa3113-b301-48fb-aa59-611891fde18c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f0fc15-9bc1-49eb-bd09-9f21e3cf47c5", "sighting_of_ref": "indicator--a9e530c6-b807-45e0-9ec0-3374eb40d4f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f55b03-4174-4844-bb04-7bfb4ae4454a", "sighting_of_ref": "indicator--bcb6b3d3-92d7-4849-897a-731b89a62b08", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34afcafd-9c65-4335-8adb-682b0a2df9e6", "sighting_of_ref": "indicator--4110c585-bb4d-4dfd-8ee3-a6696b20a5e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0aa72c-e9b3-4246-b1a6-6d1124aebc99", "sighting_of_ref": "indicator--5b1c82a0-9c25-418e-b201-806fd05eee2e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410bb46b-0ca7-4b5d-813c-25ae6a57828a", "sighting_of_ref": "indicator--ee0dff45-ecdb-44be-acb5-2f56c37db536", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5f9d14-98ea-47a2-bcec-d8a022e86ff3", "sighting_of_ref": "indicator--ee0dff45-ecdb-44be-acb5-2f56c37db536", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9ebd4f-81c0-4f8c-9d5b-80b0a126961d", "sighting_of_ref": "indicator--5ccb920f-6d6a-4e12-a356-925e71faff34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b2cf5a-5260-441a-94b4-db613a125372", "sighting_of_ref": "indicator--a72b8899-131b-4613-8b87-c788c1986d0d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bac7152-1bb1-4c4d-bee2-3c1affab59ff", "sighting_of_ref": "indicator--e4a9dd84-bd04-4e61-9f1c-c4618ea4fbc5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b64c2a-4d42-47ee-a457-31a1af10cc84", "sighting_of_ref": "indicator--772cfdf5-3264-4ca9-99c4-66657e1fbd10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d46b13-b035-4c85-8842-bfe75e4b603c", "sighting_of_ref": "indicator--3db08203-64ef-4238-b3cd-3620dd162789", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123720ba-29d9-4e40-805b-a7e9f39f0a4e", "sighting_of_ref": "indicator--a47454a9-e121-43f8-b6c9-9d4c046b980d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d36675-386d-4450-997b-0a2721b0b17b", "sighting_of_ref": "indicator--588d4ee9-3ce3-441b-883c-7c9a9578f6b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6379f0-b576-4eee-a277-bd967fc21a12", "sighting_of_ref": "indicator--7e352a1f-42ce-4d86-bbde-812cb1411efe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecb9f10-6933-46ba-bdb0-f05243cc7bb7", "sighting_of_ref": "indicator--90b4d2f7-23bc-4094-89e1-b2d56119aca5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612eaf52-6f8c-48df-92f9-4da5c1e9ab07", "sighting_of_ref": "indicator--43025d43-3ed8-44f7-bc6b-b8865f87c391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874d57b8-57e2-4f88-8014-40c78bb5e877", "sighting_of_ref": "indicator--42b1cd25-4f5a-4d3e-a732-976bd97adba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c22fb0-3c92-4449-86e7-7704e07a6495", "sighting_of_ref": "indicator--a3318170-34ff-405c-8aca-46b0eb0a2b9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce917b5-36fc-4619-939e-814564e06e38", "sighting_of_ref": "indicator--975db12e-ebbd-41f4-93fc-15b5ff3325ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8faa4-1b38-48c9-aa40-8ed890788d15", "sighting_of_ref": "indicator--06336f29-dbc4-461b-abc6-66829a2d25a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338ecedd-c11d-4e4e-9727-363f11c18eae", "sighting_of_ref": "indicator--ab2aba86-c19d-4200-b873-2c4333e4404f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7752d2a3-cb4c-4d70-bd7f-2d8cac69c407", "sighting_of_ref": "indicator--809622b9-3d61-427d-8d3d-e473e58dd51f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b338518b-a771-4d48-bac0-99223d624e0a", "sighting_of_ref": "indicator--6265843d-6bfb-4f1e-84e1-b7dab015fafd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fbdcb3-91c2-4aed-844b-81fa5f54901c", "sighting_of_ref": "indicator--572e5a1f-61a0-409a-9bb3-22bf57a4adc4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99ea9cc-eced-49c4-b096-e7e362218855", "sighting_of_ref": "indicator--572e5a1f-61a0-409a-9bb3-22bf57a4adc4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4afbed-80ae-4ff2-97ba-825c0d1a04f4", "sighting_of_ref": "indicator--f7d69823-e399-4db4-a299-fcc4f4b87de7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c70d6f0-7bb4-4e79-9820-560115e1f906", "sighting_of_ref": "indicator--4e49cd4b-b75c-499b-b68e-000aa738afd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d7510b-ec09-484f-b797-6f99f868c915", "sighting_of_ref": "indicator--8f6befc1-784a-4553-b5c8-e26662f10cdf", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9654dd3b-04f4-4d95-9644-45d3316017e2", "sighting_of_ref": "indicator--8f6befc1-784a-4553-b5c8-e26662f10cdf", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90c7ab-26ae-4a49-9b4c-db29fcfbf62a", "sighting_of_ref": "indicator--18eb1d78-4a39-43be-a942-f4994414a5ee", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eea0e9f-dafc-4111-bf78-fc8a6a532f9e", "sighting_of_ref": "indicator--d7062105-5bb9-49b5-b041-a4755ec36132", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cd2abf-6ce0-4bf7-b3f3-2cecfe3d8307", "sighting_of_ref": "indicator--7364eb76-ffd9-476d-92c9-d2cde4bc4ecb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b26eb-cdba-460a-8ab2-d6e8af2a8c2e", "sighting_of_ref": "indicator--b291f5a0-37f8-460e-8576-d62fedc56d2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28262cc9-be69-49f9-a1b9-07ebcba232b6", "sighting_of_ref": "indicator--08579d2c-9c93-4428-97a8-3e21a8c35dea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec1adda-b88b-4b64-bd8c-db73a8b23ca9", "sighting_of_ref": "indicator--3b1816bb-c789-40e8-8f30-909f14dd933a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0ce768-f70c-4dba-8fa7-050462f753c9", "sighting_of_ref": "indicator--53bab8ac-e21f-4aa0-85e6-290598e7aa0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a02fbc8-ccaa-4606-ab05-77f27166f96d", "sighting_of_ref": "indicator--0700dde2-4da9-4fce-a2c2-ec325203338f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307f8d1d-7744-4e7d-b19b-b6d355391755", "sighting_of_ref": "indicator--78b3ec58-f645-4485-af15-7bb80acee89a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33afa00f-d6fd-44fa-be0a-2eef43611153", "sighting_of_ref": "indicator--1ebf5ded-0534-451e-9fd3-89432e69c1bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058a699b-3700-4b2d-b311-cb0f47e44331", "sighting_of_ref": "indicator--6e54c2e8-f274-462c-b8f7-763bdd58ad96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d065169f-8638-4044-a0bd-7acd8bc0ffd6", "sighting_of_ref": "indicator--7f253083-1454-4802-b30c-9e1dd346cccc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543ad291-1bfe-4213-b978-9142288c607a", "sighting_of_ref": "indicator--f3f058ce-2111-43bf-b054-ca415be33ce8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a1eea1-1640-4910-87b6-1684781cb2a1", "sighting_of_ref": "indicator--ac67e0f1-7945-4051-9f6b-39eb61602e6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6bfcc8-b264-4c50-a160-ad391812f21a", "sighting_of_ref": "indicator--2c180be4-fab0-4980-8bce-7f8d059bdaf7", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1a5bd9-3359-4d50-962b-99cfd820e4dd", "sighting_of_ref": "indicator--f2578381-04a2-4b92-aa8b-08ff722b931a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85386216-5241-44ef-b063-e64d028d3baf", "sighting_of_ref": "indicator--daa295ca-ceea-4611-a818-65f97b48fe94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f4d297-d027-4ac7-a87a-4e16deaa217f", "sighting_of_ref": "indicator--963c7231-637b-4d35-a23a-9b498e1fe045", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee026ab5-b379-436c-9603-702c25076702", "sighting_of_ref": "indicator--ec66e412-ecd5-4614-b153-619577c24392", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba58aae8-ceea-4cc7-88e3-153a091f6b0c", "sighting_of_ref": "indicator--e2ae7d73-caed-4bc5-93d5-19f3476e2bd5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf1f1c2-0343-4277-8da3-c7707c8d545b", "sighting_of_ref": "indicator--483f75a0-29dc-4f91-9094-cdd807daab3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0501bdf0-3e87-4501-bb35-767b26ed534f", "sighting_of_ref": "indicator--fb428266-7ea4-4ea7-b348-1714e1b225ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb081df7-0700-4d7b-bba5-f30ea9476134", "sighting_of_ref": "indicator--1566b18c-b3a7-49f3-929f-e5ba2aa15866", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fb2e8a-6618-408e-9672-a6675dd89e8c", "sighting_of_ref": "indicator--291dd775-75a5-4b1b-aa06-6ab9d82b349b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420ee0f3-cdec-4b44-9db5-9a6b2b5ea396", "sighting_of_ref": "indicator--b00d3c9e-0b1b-4b75-84d3-3c1fce211c23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea07b75-6c29-416e-a8b6-9441c507c755", "sighting_of_ref": "indicator--4b1a5fc4-fa75-490e-b533-ecc6dd8f3d2e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb92a8c1-346d-4622-9514-f61ee691f5f6", "sighting_of_ref": "indicator--dd8c17f9-30f9-4e25-8cbf-8bd1ebe75db3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06779e86-719c-43c6-b015-281b57a757ec", "sighting_of_ref": "indicator--875c537a-55e7-4711-baf5-35045950a65e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a8a47a-ce53-4bfe-8e90-1755f27d5b42", "sighting_of_ref": "indicator--a808a615-e1cd-4288-b7ef-10c9489e1494", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cffb0b0-7ce3-440f-a45a-730a8fbc6533", "sighting_of_ref": "indicator--4c36013a-f22a-48f8-b852-99b462725e1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a7a452-1a37-41cd-afca-c40d0a2be6ee", "sighting_of_ref": "indicator--ce8010b3-4600-417e-acd7-ba8354e7b562", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e5abcc-f5f7-4c7b-9550-3413fac94087", "sighting_of_ref": "indicator--a9ed9c45-394d-4033-824a-43562dd1246d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f969b9a0-eebc-454d-a834-371521073188", "sighting_of_ref": "indicator--1f29c53f-d751-4f01-b0f1-32006809493d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d026258-312d-4c3b-895d-0bfdd1abbb6e", "sighting_of_ref": "indicator--5fb8f8a7-2012-41da-812c-1491bb230d86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a99eec-7012-4332-a91e-e9f8a053b5f8", "sighting_of_ref": "indicator--35b294e2-6028-4605-9143-c6a7480d1da0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d1aadc-65d3-4f9b-bf2d-099e657d22ad", "sighting_of_ref": "indicator--5d3252c7-c4d3-4621-9042-5d6153db96fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79839bac-236c-4eb6-871c-0cd38c594ddb", "sighting_of_ref": "indicator--e9d0a387-81d9-4ff6-9b8d-5e52f15a4956", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4058ec20-a25c-4725-bb27-243d057e8a40", "sighting_of_ref": "indicator--75faab4d-b740-404d-9d0d-f3b9b8a7a903", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377ab1b7-2862-4786-8dba-6ca5dbe9983f", "sighting_of_ref": "indicator--6cfb67d0-bcb8-4057-9686-9fedd3dfc39f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583b5487-89a7-4147-aa51-d4ef1f21994d", "sighting_of_ref": "indicator--18614216-4348-48eb-9279-c10772b0cf38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b48879-0f81-4350-b7bc-aec3b34b4a8f", "sighting_of_ref": "indicator--c5726244-260a-4770-bd72-5d6b647f1f6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8244ac8-7cc3-415a-9b75-9d82fcf9de4a", "sighting_of_ref": "indicator--a3bbaaed-cce7-4c11-9633-387feb64f277", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea268ed1-7745-4fd0-951a-965be1461b98", "sighting_of_ref": "indicator--b3c845b9-3160-4ee5-9627-d66d046a02e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4ae81f-fd1c-4f5f-8369-d8bdb70a3526", "sighting_of_ref": "indicator--8c190f39-ef65-49a8-a0d5-f77760eae3f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5cfd6f-8122-4442-af22-683122fc81df", "sighting_of_ref": "indicator--b41ec315-9792-452b-b32e-514bd016e8b7", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d294e4-a4cb-4d63-87cf-ea1561077a58", "sighting_of_ref": "indicator--dc944fc8-4930-476c-8b7d-44ac403446c8", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b347411e-2d47-471d-b17f-ef7b843920b3", "sighting_of_ref": "indicator--db3a7e15-6d20-4fd7-aba7-0085ed1105de", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca04409-6c69-4854-a62c-3d25d2420aa9", "sighting_of_ref": "indicator--99ff8c27-e7f6-4cf4-a9de-680918112fe1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9d5a08-eed6-41b7-a982-e10bd3fdd720", "sighting_of_ref": "indicator--1a175c0b-e10a-4b79-9cf9-86ad399a65f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0b7043-93f0-45f1-9610-5d2cd8856db3", "sighting_of_ref": "indicator--adb7746d-3754-4ab2-92d0-3c66e4b516d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dce2b7-6350-479d-b85d-65b7034c87f0", "sighting_of_ref": "indicator--aa98afc5-a13f-49ce-afe5-37399e319d60", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf82935a-09c4-4198-866a-5f0da3468621", "sighting_of_ref": "indicator--bc0fc8db-20f6-4024-9b37-f24ff6255c9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f285436-8cbc-4184-a628-99e71e9c9091", "sighting_of_ref": "indicator--f4bda890-976b-4a8a-ba06-c11b63a2f72b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3338db13-8939-40d1-a241-aae39808ecb3", "sighting_of_ref": "indicator--2d612500-b02f-439d-b630-0583c7974ea1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cdbb0b-311c-4517-b96e-f9de1c087a7e", "sighting_of_ref": "indicator--a308a218-a627-451a-8e5e-e9a7046e0ae8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc3f897-4ccb-489f-b069-9cec003ec263", "sighting_of_ref": "indicator--46675da0-1823-4108-8ec8-00aff6fc050b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00295658-c850-439c-a59a-9f099b999545", "sighting_of_ref": "indicator--ef18a737-d54f-40c4-9da9-45df60fb7ccf", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4488e7f-a4c3-446d-a244-28c358d86242", "sighting_of_ref": "indicator--319e4000-130a-466e-92fa-aa61d07d76e0", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a583204-66df-41ac-b6ea-21cd8496801f", "sighting_of_ref": "indicator--dea8ca57-8e45-4cf6-aec0-46a9ebd3d2b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46a46f-70b8-4c8e-8517-c46ddfd60487", "sighting_of_ref": "indicator--9d61f895-0ceb-49c2-9a31-50af42fd1cd4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c58e93-3bed-454b-b831-d3e5165b1b42", "sighting_of_ref": "indicator--114143da-d3c7-4920-9aae-35d392ccbb0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aaeacc-6aaa-4958-8a32-16f355c60ad5", "sighting_of_ref": "indicator--75da2650-0d5b-439c-81b0-c426e599d107", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f98faa3-e28a-4282-8231-bfae6a830f8f", "sighting_of_ref": "indicator--9b925afe-f14f-45bd-b4c8-9e02b5d1f0bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90c8c19-0fb4-4fc2-96fa-9ee7fc5a0e76", "sighting_of_ref": "indicator--87057d71-9f6e-4cbb-8291-3192ab437f06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc8f20-6e89-4ec2-80b6-920e90ce2706", "sighting_of_ref": "indicator--0253b454-64d1-4060-b12f-e1717bfeea06", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecbed5c-501b-402a-a69d-322c4ab524bf", "sighting_of_ref": "indicator--69bef0c7-bc15-4d99-ae7c-0c802987bfdc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf29d44-04c7-46a8-9aa6-8360e3b6797f", "sighting_of_ref": "indicator--3eae3ebf-c0c3-4090-8eea-8bcc034d84d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60f1c3a-efe8-4d00-a2bb-a88e0e0a7939", "sighting_of_ref": "indicator--cb96a9f2-e56f-481d-8dde-bae01b2fd1dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d898ac-bf21-459f-900a-ce92983f1d63", "sighting_of_ref": "indicator--2321847e-a829-4c92-8099-5579dd856ec4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bde37cf-d196-41e7-a800-8c96607b1e2a", "sighting_of_ref": "indicator--59e7e185-a1a0-4a06-b8c5-3975cfd48e48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab8f6fc-ab9f-4cc7-8402-f58c3c865d64", "sighting_of_ref": "indicator--181f2c8d-e6da-4fd9-bf3b-905cba0e553c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62bfcda-052b-4d2a-8c23-960b5b002003", "sighting_of_ref": "indicator--84035816-1be8-4f01-b5cb-d71267fc424d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d78066f-2bf2-4e76-b11b-1bb72b81e823", "sighting_of_ref": "indicator--c0aebb6a-b78e-4121-b3b7-15ca05d7ef8e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385de2ec-e328-4861-b956-69917878e622", "sighting_of_ref": "indicator--85330647-9a56-4605-b6f5-cdb8703a4692", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1226ed-c686-4362-b54f-d25f73321acd", "sighting_of_ref": "indicator--ee570299-a7c9-4eb9-8286-9f5fa775fef8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27111b0-646a-4b0c-98e3-238f6513266f", "sighting_of_ref": "indicator--c546f7e4-2e46-4e8f-aef5-99f42b1af4e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca79932-7abf-4735-9dec-47904ac405a7", "sighting_of_ref": "indicator--49711909-f7b8-458e-82a6-082c768f0fc4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5fb27e-8ca3-4209-9812-2306659f6394", "sighting_of_ref": "indicator--aa854f44-225a-491f-ad56-8a55ecccc39f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdc151e-0998-4aa7-bef7-c0e8176a0834", "sighting_of_ref": "indicator--e5649257-a4ac-47b7-9cf1-53803e9285ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7acab0-d526-46ed-ab6c-efd548a4cd2e", "sighting_of_ref": "indicator--c4ba8cd3-e98e-4758-a1f4-850bcc448e84", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a888900-5bc1-4fda-bc42-24d3a1c72722", "sighting_of_ref": "indicator--981f8bd4-22c2-4820-bdb0-3bbff8daaf6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b87b33-9389-4f63-9ec8-7aa73eec0c1a", "sighting_of_ref": "indicator--a8c6352f-936f-4fb3-822b-70698db27b67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a05b1e-4e53-46e6-9196-bf0fb30f7484", "sighting_of_ref": "indicator--9149a8d7-d1c3-417e-abad-dc00d2029105", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f8da3-d43d-4e27-af7f-3d5ee6f918bf", "sighting_of_ref": "indicator--e1af5da9-47a6-43f7-8532-f9c8b71ee11d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71211ae0-c470-447f-b7a2-3a116039ddfd", "sighting_of_ref": "indicator--aee990f4-15a0-4760-88c7-1389e3952448", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f94253a-f172-44c9-844a-c8134cf931dc", "sighting_of_ref": "indicator--11b56cb2-ac19-43cf-84a4-794adb372478", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c01ab-1c2f-49cf-88b5-98716e8186ae", "sighting_of_ref": "indicator--ddc39188-bb6d-45a3-9dd1-02800aaefa4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58e94ae-40af-4d7f-9ee3-64e82cac6846", "sighting_of_ref": "indicator--0eb88795-657f-49c1-90ee-8a7636b0cd59", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fec31c7-4a3f-49ca-97a4-d1b01000bdce", "sighting_of_ref": "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f48d80-0539-4bf5-921e-06c89d7ff285", "sighting_of_ref": "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051a0d8f-a3dc-48b8-898c-3250610d3106", "sighting_of_ref": "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057132f4-23e7-4195-8706-1c4244b783dc", "sighting_of_ref": "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f612ed81-255f-4c72-8c3d-2a30d6204979", "sighting_of_ref": "indicator--2917f0b6-a959-4fca-8dc8-1ed42d4e5139", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c7d682-632e-4a3f-85b7-5af2f19a8601", "sighting_of_ref": "indicator--c0d2a180-796e-4cbf-bbc5-5ba8a8e82d35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a3f2db-6da3-4f7f-827f-ca450d2fa0fa", "sighting_of_ref": "indicator--c0d2a180-796e-4cbf-bbc5-5ba8a8e82d35", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed42eb66-df68-49e6-ba2d-8775c5074e67", "sighting_of_ref": "indicator--657564a7-a4aa-403c-bc18-65cab030c873", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f476d155-0d62-4a7d-bf28-fffac50c24db", "sighting_of_ref": "indicator--657564a7-a4aa-403c-bc18-65cab030c873", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4330055-fab9-4fc4-bb5e-315d1ae99a18", "sighting_of_ref": "indicator--f9962def-534f-4e4c-a77d-f661900b93eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53a843b-cbc8-45f0-b43e-e687a066272b", "sighting_of_ref": "indicator--f9962def-534f-4e4c-a77d-f661900b93eb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a2c6ef-46b2-4af3-85ae-1c3aba99dd04", "sighting_of_ref": "indicator--083e02a7-107b-4532-b25f-d43fde0957fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5fa6d8-0226-4c76-a364-d25123606e61", "sighting_of_ref": "indicator--083e02a7-107b-4532-b25f-d43fde0957fd", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca81484-fa3c-449c-98d2-939519009096", "sighting_of_ref": "indicator--04471b55-e2c3-4956-8f34-46d67c2cff4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b467e7-eb7a-4503-98d4-b20812a854bf", "sighting_of_ref": "indicator--04471b55-e2c3-4956-8f34-46d67c2cff4b", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b038425-d9bc-4d3a-9c6b-61598e5e7820", "sighting_of_ref": "indicator--bbd53545-c2a0-4e82-8b63-b2d5a6d80f5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8ec757-320d-406a-8cdb-158af41d08a9", "sighting_of_ref": "indicator--a6593176-72e6-4213-9186-6ae545f9ccd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fec05ee-6758-444c-880f-408077e6f7a2", "sighting_of_ref": "indicator--d54a258b-4291-4a40-af98-d2b5665ddaaa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636bbb71-a2b8-48ae-9e24-4852fc89f04f", "sighting_of_ref": "indicator--ac384196-f08f-4ade-9f1e-3ca6fc6b9a75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291ae65c-4d0f-493f-8634-bfb6da5782cb", "sighting_of_ref": "indicator--9f1c2154-0300-4c26-ac54-0828a9c91ac0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b34917-8797-4ca0-a752-e690abcd7140", "sighting_of_ref": "indicator--a86a6252-4f96-4758-8fb6-cb9993330e59", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457024c0-8310-4309-b700-4796ca9a7f0b", "sighting_of_ref": "indicator--cbfd1e1c-b503-45ce-a5bf-bdd3b582e637", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a70600-00be-43f2-ac7e-44c77070cc21", "sighting_of_ref": "indicator--0e39ee70-523a-49c2-ac97-78a9762ec0ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a069b74-6ca4-4796-bf24-43ea0b848d5d", "sighting_of_ref": "indicator--92beebb0-3a47-4be2-9b64-a19766744c31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce13f5c2-58e4-43e7-b225-210b784864eb", "sighting_of_ref": "indicator--733162b7-1776-4829-bddc-5eca30355904", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc85bfb-c830-4870-af81-81c505d3d76b", "sighting_of_ref": "indicator--4c2ffd6e-debd-4882-9f66-8d57a5d55675", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244b8a43-d642-419c-a97c-48cefd35c752", "sighting_of_ref": "indicator--350a339f-7e11-4bb4-be02-df40249556d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7605c66b-f29d-46eb-b936-799e8f7d69f5", "sighting_of_ref": "indicator--d2a6f7fa-38b8-4479-bccc-de0ea32b783e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544c9863-dd94-41e4-b4c7-955d083d576b", "sighting_of_ref": "indicator--91b46832-541c-4d6d-bc13-ff63274c2940", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e2c6f3-fb4c-4d61-99c1-8400a212379e", "sighting_of_ref": "indicator--5d26223f-575c-4faa-b6ee-5aef9988aaa2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc3980f-4dbf-49c3-b48c-5c8d3104b484", "sighting_of_ref": "indicator--122d130a-428f-4a46-913c-3e61e7645dce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07202934-19c7-489e-9d30-d3ced86c0d07", "sighting_of_ref": "indicator--76d451ba-4630-4230-a9bb-82241b2b7383", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd00fef3-37c0-4ca4-be9d-d483a62ae4da", "sighting_of_ref": "indicator--7e5fa9bf-b861-4155-8c1d-550ba97d9f18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d7de69-5d6d-4d3c-afc1-5a7b2407ed7a", "sighting_of_ref": "indicator--5cce84c0-3557-480b-bdc8-700cbba60a9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8e86e7-7b94-4e8f-bd0b-67f46929d213", "sighting_of_ref": "indicator--f5f26dfc-723f-45de-89a7-93190f062618", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61a8b7e-cfa6-422c-89f1-e6c134882061", "sighting_of_ref": "indicator--6772c5c7-6c0b-4fb9-898c-9ef373fc4c7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebbd961-9e6a-41d6-b79c-982f30fc072e", "sighting_of_ref": "indicator--32abf4c0-b1cf-4e3c-990b-4e798336c26a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf723ce-e8a6-4a26-ac71-0268eabb741c", "sighting_of_ref": "indicator--9405ded8-beff-4d78-b3da-7b41a7a853cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b0319-96fa-4baa-b340-22e9a64adffb", "sighting_of_ref": "indicator--1e4d35d4-6007-4719-998a-c5f650107ff2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cd53a5-2d1b-411a-a95d-fdec1cd7a589", "sighting_of_ref": "indicator--28301fb3-d6e8-442e-a736-50c63b1abf57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a517a0a-cf2d-4cae-9971-4554bb0ece16", "sighting_of_ref": "indicator--6cb186a9-3baa-4211-98fa-3d2b0ddcbc74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd33fbd-f2b1-43d3-ac00-094589c72cc6", "sighting_of_ref": "indicator--5f44a4c8-3707-4420-81f9-26a8a6c79aad", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08019b0-287c-4d0a-a4e2-4f8d3f72890b", "sighting_of_ref": "indicator--0e82a04a-4ba6-43cb-9b0c-a6207609a722", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2a879e-2850-496c-b792-593b106c4805", "sighting_of_ref": "indicator--ab17ca76-c206-4719-b020-fcc3b4676495", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d355a09f-7e99-4513-af89-99815386dbff", "sighting_of_ref": "indicator--7c915d9b-0253-4bb1-ad18-d07df8c17bbb", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f3e5d8-6929-4f51-9e2c-03269c46a580", "sighting_of_ref": "indicator--902df9c7-c87e-4038-b9c5-7c55039f3035", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9149d97-9026-4277-8359-1aa869eb4426", "sighting_of_ref": "indicator--f4a5c7ca-ef3e-4ba6-b262-11b7a678c4ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918fc6fe-41f0-4bef-b73c-3e2db4578050", "sighting_of_ref": "indicator--918de84c-e94a-4896-b230-5fdf26796921", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4532558-b626-479d-8fd0-564dc9daccf9", "sighting_of_ref": "indicator--a134ad21-8d4e-41a1-be2a-10eaae0821ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86eb1d8-eadd-4001-acfc-a12bd5a306fd", "sighting_of_ref": "indicator--056e23e5-72f0-468b-b574-bc8835328cba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c801f19b-00ec-4450-a67d-5dcb3295d35b", "sighting_of_ref": "indicator--1a7eff9c-a7ed-461a-8a30-8781ce133b7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2436047c-76f5-442b-b715-479e003007a0", "sighting_of_ref": "indicator--88006884-ea1c-4318-bd91-49a5aa86b3f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d415340-400a-4fa2-89e5-ed1f3c373900", "sighting_of_ref": "indicator--51777b00-f100-4ef8-80e4-64433ed14df4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79e762d-cdfc-4f56-bcec-12ada3499409", "sighting_of_ref": "indicator--385d86be-dee3-4f4e-834c-32ab0d010c87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93d2d00-b0d6-4d39-a7dd-59629dacaf0b", "sighting_of_ref": "indicator--3a621133-aa3c-4cbb-bb4a-03de13ba1979", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e1247d-98bc-4820-838e-6f05fc430b05", "sighting_of_ref": "indicator--7a5fc29e-95a9-48b6-9f05-f35089db4520", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d3a1f5-c7b2-4aec-b022-0b4d13968802", "sighting_of_ref": "indicator--d7ef8644-9877-4476-9440-020c3ce181b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2961ec1e-ebc2-495e-a6f6-d62d2eccb68a", "sighting_of_ref": "indicator--0832ea8c-a9f0-49ae-80e7-35bed9148999", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a42a8d-b2ab-4dbc-bf60-5b3b6919bc06", "sighting_of_ref": "indicator--243785b9-6cb9-425f-b1ea-08cd7795a135", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304a530a-fc29-40bd-b83a-8d286264153d", "sighting_of_ref": "indicator--1d3bd39a-154a-4240-bf40-3b3b836cd722", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962e7c9c-776d-4b8a-a9e8-eba61f5be481", "sighting_of_ref": "indicator--f6c33c62-bd32-4237-8974-6cff0e18b734", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16003e31-348c-490c-9440-436118ec0725", "sighting_of_ref": "indicator--9a679f04-df60-4281-be9a-1b446ff3f3a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1fa369-146f-4e7a-9869-13ca6a8f867c", "sighting_of_ref": "indicator--8474634f-6b93-4718-993c-e72eb495e8ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896fecb9-de5d-42c2-b781-f34f63722fb4", "sighting_of_ref": "indicator--8474634f-6b93-4718-993c-e72eb495e8ba", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b50463-f9ab-4048-aed4-938a294d0f24", "sighting_of_ref": "indicator--4b0cd715-e802-4a6d-9af0-128f09bea3c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea8cd49-6ffc-4668-801d-031eaba6200b", "sighting_of_ref": "indicator--2565fd84-446a-4961-b98d-bca71a1a84e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8d8d6b-a934-44e5-9675-522288d45d59", "sighting_of_ref": "indicator--7a255872-1a9c-4b60-b4cf-b16c3e07785d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd54da5-94dd-4126-944f-5343f4c9f8b8", "sighting_of_ref": "indicator--f7158e38-87fa-4a13-8f5e-feb46eb5e3f5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8ee083-cb46-400f-8b2a-866c92ba4cb4", "sighting_of_ref": "indicator--1a8afe7a-8cdb-4e86-b44a-671029cbc72a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79103416-0243-4605-a82a-07d2070a78f7", "sighting_of_ref": "indicator--8beb202a-6f35-415b-9023-6122c0da2743", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6562d1-d826-417d-ae7b-101f347b026e", "sighting_of_ref": "indicator--413c3a70-fb69-4965-9e56-d737ac195a2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5d5c2c-4c1f-4ed4-9cc5-76aaa637fc22", "sighting_of_ref": "indicator--3820d765-3c63-42ff-8c22-43702a42fcb0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa2b421-cdd8-4588-a5c9-6f5f80f2cbad", "sighting_of_ref": "indicator--9d1320c5-6aef-4bff-bfdd-4c9fb92b77b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca57a2e-f53c-45b7-bd82-03a8f845402c", "sighting_of_ref": "indicator--7212b29a-ff87-4411-b0d3-638c5076aec0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d2bc05-c3f8-4a75-ac9a-044422f4d4c6", "sighting_of_ref": "indicator--1ea6f33b-d1f9-4376-855d-7c5ec4c5200b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c3c00a-4587-4de1-806c-e13b5e2f02ed", "sighting_of_ref": "indicator--5e803f56-459d-4926-b062-f5cfbac9fbbd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9b2bbf-17f4-4ac3-9ccb-245c5b7ed417", "sighting_of_ref": "indicator--def783b7-ec6d-4121-ba24-4cc51b9adf99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601faa83-e643-4822-87fe-25b91b251ae0", "sighting_of_ref": "indicator--cf854abc-5ff8-4a0a-928f-3ff9649fb1eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4836bf3-a758-4be8-b5fb-883219f5dfbc", "sighting_of_ref": "indicator--50a1ef74-5f63-47c7-8cf1-8c28b3339fce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9000f5b1-1570-444d-9673-e38157dc0e6e", "sighting_of_ref": "indicator--12dc9477-261a-4206-8b4d-5e9f012c0c90", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ae1571-0025-484e-a1ff-a6dc333ad2f0", "sighting_of_ref": "indicator--166ee7af-b8fa-43a0-9fb6-99b2b51de23b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2dca72-ea6b-4a6f-b38a-f51881d3aea7", "sighting_of_ref": "indicator--aac35058-de69-4ef8-a896-bd782d0bd5e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4d0f6-87d4-45c7-a531-2bb083f478ab", "sighting_of_ref": "indicator--3fc531b6-a2be-467c-96fd-b3b0feb1e28e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3679f5e-007b-4281-a888-c95cbdc93a5f", "sighting_of_ref": "indicator--8a77dc1d-6e73-453f-a3bc-9fa90364d58a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ae0842-a065-463c-8a57-ab2a98233970", "sighting_of_ref": "indicator--ff50fbc6-48a2-49dc-a0a7-d3692a98f0e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227d08d6-1cc0-42ec-adcc-13041a13be20", "sighting_of_ref": "indicator--14d9c724-14ac-4a0d-9978-a6187f6dc353", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cd1e15-eeb3-477d-be5d-530baaf0d278", "sighting_of_ref": "indicator--d2d45d2b-53ae-485e-b768-6fc7dfd3ac79", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49fe4ad-9401-42c6-9865-4f4a82db7ac7", "sighting_of_ref": "indicator--d2d45d2b-53ae-485e-b768-6fc7dfd3ac79", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e09cd7-d2ef-4a6e-a668-117e75e659c1", "sighting_of_ref": "indicator--a5b633a1-3ec1-4622-b0e9-bd30e562b32e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c83575f-9af1-42d7-b8bf-1e50685dacd7", "sighting_of_ref": "indicator--3136d7df-8fe5-4275-803a-8f9d7562675d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef78877-7f52-4f77-8b16-42fffa166adc", "sighting_of_ref": "indicator--9b5ff385-d8bb-4945-a750-7ce3bad14f5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5ee5a5-20f4-4181-97db-f4f0948e6006", "sighting_of_ref": "indicator--37dfd2e9-41c2-4bc2-be9f-fc59af858ac2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aea361-866a-427f-a100-6ba4b24072ab", "sighting_of_ref": "indicator--0b0c5e3e-80fa-4d99-b115-33cc638d811d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef63df5b-7ab2-40f3-ae92-7dddecc65b15", "sighting_of_ref": "indicator--4c74b1c4-1793-460b-b705-1209a6d341f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b9b86-032f-4ac2-aa24-4b9853295fda", "sighting_of_ref": "indicator--a78ad819-82ee-4d19-acfe-82184251d2f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6031f97f-4884-4571-b295-8d4f31935d56", "sighting_of_ref": "indicator--6215fd54-73ac-4d9f-a844-e3435201831d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a5c6ae-53fd-4a53-8721-ee85396c885a", "sighting_of_ref": "indicator--34c85894-4aae-4ecf-80d7-24e46b18eea1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52d7fc1-66f7-4e4a-971e-1b1c7b4a3e1a", "sighting_of_ref": "indicator--b1b648b4-2a17-45b6-bffc-b61c6ca4f299", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b37d4db-6e7f-46a0-b179-b46682ebb95d", "sighting_of_ref": "indicator--3ca5f71b-77ca-43d5-b6c7-263d23da72f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41478a0d-4c5d-4368-ab9e-eae696372b18", "sighting_of_ref": "indicator--ba9df2eb-a30a-4e1d-af06-be3564bc9646", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26cf37-716b-405d-a118-ad9c151da1db", "sighting_of_ref": "indicator--2c2f2af6-4e80-43f5-9a3f-0b129b251179", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9346a3ba-1561-4280-ae72-0d9468b575e0", "sighting_of_ref": "indicator--ce47f2cc-127f-46c0-bf1a-97eb8a0aa6b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14b07a3-23a3-499c-8d3d-f96808d34ab2", "sighting_of_ref": "indicator--2581ae56-2434-4f86-a8c8-655d048057ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a893a-6205-4bfd-b4f0-2bb7fb82eb21", "sighting_of_ref": "indicator--508b8b3c-48cf-4a04-aa55-1d4f2f91b9cd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f97033-c2b2-4bc1-9f61-d656de1ab152", "sighting_of_ref": "indicator--b2c568ed-06f0-447f-8677-2ac4c83b1245", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00088f78-ae24-4f32-8ac3-2751c235908c", "sighting_of_ref": "indicator--0d6b7a08-5561-4510-a0b4-9c58eaee860c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b5cf85-86f4-4e6b-b6c4-f980012992ac", "sighting_of_ref": "indicator--417bb7ed-b2b7-4fbc-91a3-8525073e0d7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea0c2e0-322c-40c9-b421-887f2b24362b", "sighting_of_ref": "indicator--2c6e756a-e4b2-45ac-bf51-13840f80ff3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a41a6f-d0bd-44ff-a308-e6c91678cee2", "sighting_of_ref": "indicator--05b5bdf6-bfd4-4b98-bde4-ac7f82424693", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405f88bc-9691-4ab8-98fb-327ac3cfba90", "sighting_of_ref": "indicator--a0367d84-ae22-4bf4-9d17-041d3bd4cf75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731720b-af92-4e9e-aee7-c5ae78fa354b", "sighting_of_ref": "indicator--a08afe09-5b56-4e0b-bb2e-bf520c872c9b", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3aaadd-57f3-48a5-bd5a-492c40a86265", "sighting_of_ref": "indicator--0659a82c-da55-40a8-8420-d16f5baea7a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd08a16-37bc-42d0-b9d9-cdf4d15c3f3d", "sighting_of_ref": "indicator--1611fc56-b276-43f6-9021-863e000b1173", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6804b9c-8865-49c2-bf46-a83a7cf494e4", "sighting_of_ref": "indicator--0e84b6d5-0234-4cdb-95cc-323c35c58fa9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8e2e60-60e6-4a62-a1f6-bae1997321a7", "sighting_of_ref": "indicator--f1318464-870b-411c-a4c5-f598be68cdbd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62fe04b-8a0c-4434-9505-fc0032bdb368", "sighting_of_ref": "indicator--419bc7b6-4e7b-423a-91a1-1f915a8eb0e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ef2c4b-2b85-4442-be28-9964deb3eaa5", "sighting_of_ref": "indicator--22ed332c-bbc9-4956-8c89-9fdcfe3f0478", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5086cddf-4a72-49a5-a5fe-6e26a0baf8f1", "sighting_of_ref": "indicator--ba375281-39a0-414c-ac31-3187e0ecd586", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f5617e-bf70-41ad-b96c-e8fc7f390961", "sighting_of_ref": "indicator--92a7dcbc-f0e3-4c5f-861c-0570befe3513", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f5d38f-7876-4190-aed8-33451ee01a0f", "sighting_of_ref": "indicator--84f3d301-07a5-421b-9900-e01083f3cc3d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3f5ba2-cbf3-42a1-84f0-5771f5421822", "sighting_of_ref": "indicator--65d67cc4-f154-4d74-9ddc-ef4770cd98f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94941995-d477-4506-919d-3348ea0e3fe3", "sighting_of_ref": "indicator--2451c015-3b92-41ef-8075-2ba5c102ff69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f19948-5a44-4613-8cd4-cd9c077bdf81", "sighting_of_ref": "indicator--94358b7f-f362-42ad-9881-b37cfca5caf2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd785082-e846-457f-b306-53aa0db6f1d3", "sighting_of_ref": "indicator--7e25ddc9-9c9d-473c-a4a4-776d4bfa8a91", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f19583-a825-4c8f-b6e7-a16f8a020274", "sighting_of_ref": "indicator--b5fbe835-3172-43e7-8254-404e016c8efa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da86c56f-bae3-4950-aef7-b368e2c217c1", "sighting_of_ref": "indicator--3f452a5b-e3d0-4ad6-a10b-6f339e2a2454", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeb0c27-403a-481a-b39c-265ec894f76f", "sighting_of_ref": "indicator--1386754d-8433-4092-a5c5-d5467a181ab6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058eb5c1-af87-4204-aaba-e3a488aa67a8", "sighting_of_ref": "indicator--1b28fe11-f389-409d-b35d-92579a6b38c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b9749a-70e4-4be7-9dc0-5e2689c2ebc6", "sighting_of_ref": "indicator--852c38cf-08af-40d3-bf61-7fd12797c30d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01afdde-ddb3-4191-ac12-67436c007df3", "sighting_of_ref": "indicator--a4572e24-5219-41c7-a092-69fce435984e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150b3154-5b94-41c1-ade0-040b7005899e", "sighting_of_ref": "indicator--fa8e9618-8480-4779-813d-8541b804db43", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a3ae68-9c97-498a-92cf-7e2ceaf46ed4", "sighting_of_ref": "indicator--2ab48c60-e91b-4f1f-b568-c45d29ee7ccd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be58690e-b53c-43e5-8adb-6e4ec0e71ddb", "sighting_of_ref": "indicator--930fbb9a-fb9f-47a2-b36b-5522f5970564", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c95fe81-7b48-4e3b-9b56-3b25f6afd500", "sighting_of_ref": "indicator--3a522f9a-137f-47c5-b164-917380e286d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d668bba-873b-44f1-9e68-095f6669fe4a", "sighting_of_ref": "indicator--935f20d6-c6d9-4af9-a346-bb43c83ff99b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19347fe-d464-403d-9384-c0a28a26570a", "sighting_of_ref": "indicator--5c732244-5365-44df-99d3-2765d799f8d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f0492a-7816-4251-9884-c8e1e70ea56c", "sighting_of_ref": "indicator--d81d0820-2b68-4cc0-87c3-d5b8335b202b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0cc085-8607-4c4e-a2e7-286cc6ef3d22", "sighting_of_ref": "indicator--34db55c1-e718-4d6a-b310-3d543f627f5f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43552fa-dba2-47c5-8aba-7dfde69c5298", "sighting_of_ref": "indicator--2e1c8880-ee7d-4ad9-98b7-2cd7e88a3016", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c481adeb-a5ad-4f56-8513-02373e2ca241", "sighting_of_ref": "indicator--6d5cfad1-c6d6-427a-b655-4c60096247ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c40db7-fef7-497a-a6db-61b9419ab260", "sighting_of_ref": "indicator--8846ec82-d3fb-4406-9974-0ec436271671", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca843e77-a11c-4abd-b746-29363c40a742", "sighting_of_ref": "indicator--eae34acf-01dd-4b35-acfb-06164b3e9f3f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a67f0a4-0f83-4ca9-bf2a-bcf138377663", "sighting_of_ref": "indicator--97c4b7a3-1f17-43e7-a4a9-f996dfbefc90", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5960658-2b32-4074-be02-15820928e6fc", "sighting_of_ref": "indicator--adc1c96a-53f8-4c54-aceb-cbaba10cfc9c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5097302-3974-4ac2-b8c1-4a2dbdb603e5", "sighting_of_ref": "indicator--79cb0ada-4d3c-4327-8cd6-1508e2dd986c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9e3fa5-39ba-4905-a735-4376704314ab", "sighting_of_ref": "indicator--fb734f2d-4e25-4224-9464-abb2c43d67c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a472098a-1a28-4052-b3b6-82bda70beb61", "sighting_of_ref": "indicator--2e6623a8-962a-4621-b103-c0d23f4c3e33", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3c87ba-7ab9-4700-8f5f-f002efc87776", "sighting_of_ref": "indicator--1b2d4f10-88b0-4f91-a55a-36ce2c9f2eaa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48d5be1-a970-4622-beff-45fbc58611a8", "sighting_of_ref": "indicator--c00da898-3aa0-4e63-ad5f-d09ee1161879", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7555e1f9-15ef-40c3-8965-c33db3389e78", "sighting_of_ref": "indicator--224966a3-e452-4bbc-b4a0-34d1137279db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764e02ca-3536-4eac-8c5c-7bea07a408fe", "sighting_of_ref": "indicator--e6fc1e5b-e839-4803-a42c-6df4bf11e6b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c369132e-7acb-409d-a90d-f49c3b620068", "sighting_of_ref": "indicator--d1660fe2-eb29-4f30-b134-73640127b0c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d76dcf-1bcc-443a-90e0-4838d9e16194", "sighting_of_ref": "indicator--2b419ca6-185f-4a6f-a61e-c03a15266f5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f147e1-f6b9-48c3-aea2-0fd94e4d5db9", "sighting_of_ref": "indicator--ccc605ee-7551-4530-88cd-224d0418d470", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c90d028-076c-431d-be85-e9e8ad0a9fdc", "sighting_of_ref": "indicator--fe48850f-9f3d-43a3-835f-190a90d5694a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414f5d6d-b9b4-4b0b-ab8c-ee70751b7978", "sighting_of_ref": "indicator--502003d1-87c8-4f2c-97ea-79cb05288add", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f25e3a7-696f-4023-987c-3976c053da89", "sighting_of_ref": "indicator--a80eea36-8b3a-40aa-9b21-2c90543fef45", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1f2cb2-fadf-4283-8cc8-b2d226a18742", "sighting_of_ref": "indicator--3a945d60-c9d3-4716-89f3-41b9553de859", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33f6109-7120-4539-b819-26818b30ef50", "sighting_of_ref": "indicator--6df8ad7e-5fd7-4565-9d65-40daab2206d3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc82207e-fe8c-4c16-9ac4-d9386f90103a", "sighting_of_ref": "indicator--28faa4f8-af98-434f-b182-c364a0674e2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e175068-71ad-44e8-8553-612e2aabf79b", "sighting_of_ref": "indicator--012cb79d-e2db-4c2e-bed8-1510f358d5a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9effeb09-e48f-4e60-bf28-81bc1c44627f", "sighting_of_ref": "indicator--b18c5114-af35-4541-9db2-3a0a0d25ea65", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430d3dc0-f115-47ca-9c65-27db8c0ab5c6", "sighting_of_ref": "indicator--e3fe41a0-38a3-4057-baa0-f724af3c1074", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2d541d-3b9a-4e2c-b6ec-c780b9327a63", "sighting_of_ref": "indicator--44395af6-c04d-4efe-a954-5eff251b0db5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed77c895-bd26-4ead-8b6e-bb49cd098a38", "sighting_of_ref": "indicator--f1a3b577-f6b2-4940-aabf-44149be3c3d3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6514ef-6e35-42cc-b480-d697ad08fe32", "sighting_of_ref": "indicator--99343977-9cd1-48c7-b40e-777f5ba6989b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c108de7f-64c7-4f02-987f-d5cdf70f5b55", "sighting_of_ref": "indicator--650a8e5d-b35d-49c4-9675-727973ccc143", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d647122-2b67-4e3a-9c4b-fc86e1b75e6b", "sighting_of_ref": "indicator--5755a211-e195-476e-a0b1-28f7448c0fe9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51b691f-ac6f-484e-aab5-a1efc6440bde", "sighting_of_ref": "indicator--d3562140-eb0f-44b7-a504-fdd7c178e25e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5301777-9dc5-4540-a21f-fce1d77f899f", "sighting_of_ref": "indicator--9264ddc2-226a-481f-893d-48863c6195d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6577a662-b3cf-407b-ac31-cd3e7b27bc07", "sighting_of_ref": "indicator--86cf0a49-8f1d-4b4b-b4f8-6fe501c59325", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8333aae-6144-4f41-9011-9efad64bfeec", "sighting_of_ref": "indicator--9c8e5c1a-e00e-4dc4-a545-e0115531cb57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99b51dd-5c00-440a-a6c2-5dce7a7b4e03", "sighting_of_ref": "indicator--d909d43b-26b8-40e7-94c4-151cb4611fb6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a859ae-2ff5-4331-87c7-d18758e92955", "sighting_of_ref": "indicator--aab418ae-c68c-4f5b-b385-3dff98166052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d643db69-a85f-4e87-8d8d-db00a33554a3", "sighting_of_ref": "indicator--fc819a47-a5fd-45f6-9122-7f3a2f6befd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b77a20-a42c-4f11-b245-d41c1e50a783", "sighting_of_ref": "indicator--a3f11620-6f3a-464e-8f32-510f6db33731", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e5ebfb-3acc-4e70-ba1e-c50ada6508be", "sighting_of_ref": "indicator--b543cced-b9b0-4043-b89b-16aa406b739a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d0aa0f-c726-4d19-a94d-35802947f1ed", "sighting_of_ref": "indicator--1df2e5db-8a2d-43b9-af2c-a5237991aa36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a1b6f5-4b7f-4980-bcd6-35e39733ef99", "sighting_of_ref": "indicator--c228b72e-5bde-446a-af24-d702d57448d3", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860e8a98-3cea-4b81-a039-b33802fbdac3", "sighting_of_ref": "indicator--c228b72e-5bde-446a-af24-d702d57448d3", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea4d6a2-ef60-4efb-9576-9fa6ef35f871", "sighting_of_ref": "indicator--31ba9549-71de-42af-8179-ba804bc1dda3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fee307-5b75-464e-8985-76c2cd9d6e5f", "sighting_of_ref": "indicator--d6bcb420-d058-4921-b307-11f36731a708", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f92fa6e-5809-42dd-9f54-882e2047cc9d", "sighting_of_ref": "indicator--f08eb4b7-13aa-4e2e-a88a-dfadd14b37a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500091ee-f929-48d6-b5d4-47caf3d3ac2e", "sighting_of_ref": "indicator--602b5a96-28a6-43a7-8ab4-4db6c17d8638", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c42408-f730-4dc5-af68-1703b3838c46", "sighting_of_ref": "indicator--3d4d10cc-303d-4312-985b-72a323ec41f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b53ab4d-2ce1-418e-8bb0-eb8c5765b1da", "sighting_of_ref": "indicator--025eb7ff-4711-458d-8bf7-f947ea47e935", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b0e037-dc9e-44bc-a14a-2d1e624f6c85", "sighting_of_ref": "indicator--580362ca-4f01-4349-9203-1f4c4eacfd5f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d250f32-059c-41b8-a7a3-3271bbe1e69b", "sighting_of_ref": "indicator--deb5d082-6fb1-4677-b8ba-303a01fdad33", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09b93f3-2054-4611-9597-32bbfb0edc41", "sighting_of_ref": "indicator--2615a7a8-b967-4a93-8d50-c147bea571f9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14047b6e-1128-443c-8d67-4b68c0cb9867", "sighting_of_ref": "indicator--9ecf6285-c70e-4961-98e3-4aed02954076", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd23130-60d5-4991-8d2a-178edc349557", "sighting_of_ref": "indicator--683dcadd-6000-4ccf-9bdc-54733ea71362", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f78fe83-e45d-4962-8cb9-056493c0791a", "sighting_of_ref": "indicator--d0ba6591-597c-4a9c-a0e7-c4d3fbe51a1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3188b0f6-0f2a-4bfe-8d54-0441e6cccfec", "sighting_of_ref": "indicator--f5d08882-8e5c-4d68-84dc-0ace68db7f9c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35691f53-b31b-437d-add8-3587d7f5b50f", "sighting_of_ref": "indicator--19b250ac-ca16-4afc-b9d3-7c57a171e02a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bc9624-e527-4643-a856-e63a302703c0", "sighting_of_ref": "indicator--710529c7-9d2a-4433-8869-1845a23a3652", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69636a47-e991-4a5e-a4b0-a9fdd1ad7faa", "sighting_of_ref": "indicator--7b28442c-2626-46ce-b7ce-346d5ee4bf6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caedce6-4d08-41e7-a8b4-706f34c524ab", "sighting_of_ref": "indicator--b32489db-4947-4dd4-8322-2cf364f03cb5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a71120-aef8-481b-825b-e6e3d77b0c2c", "sighting_of_ref": "indicator--6b57474f-ab2b-47cd-877f-5d146c27089d", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473466bd-9e26-4cde-9a5e-86f18a44abbc", "sighting_of_ref": "indicator--f1859391-16bf-45ed-b3d5-65cb50196dd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0229b4cb-94a5-4ab9-8a41-857634746792", "sighting_of_ref": "indicator--563459eb-056d-48cf-81f4-fa35e9803b04", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c23e97c-68d4-4799-86f1-d5bdef453a22", "sighting_of_ref": "indicator--7d97e8de-9a1a-485d-a11a-c8d565601eea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1aa532-8eba-4930-877e-6819117cf69b", "sighting_of_ref": "indicator--7b3dd703-1048-4dcb-81b3-7fb9c0e91457", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbd3807-cf7f-4c55-a9d7-55c04e25f1de", "sighting_of_ref": "indicator--9d2f282b-e2fd-4717-8d63-e6f3d908b5a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748ce299-3027-427f-917b-590d1820691c", "sighting_of_ref": "indicator--51d33929-7966-4fb6-90ad-13f38e5ab974", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981f6fde-fc26-44d0-a407-54bc0e73d0fb", "sighting_of_ref": "indicator--47a5bda1-3a7e-45c6-8072-ed85c39ba357", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879223c5-4091-400a-9522-af97a060a8dc", "sighting_of_ref": "indicator--38e3efb3-6465-4611-ad9d-73cf57156f62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e35b956-6912-45f4-8c69-0accf48b1dc6", "sighting_of_ref": "indicator--35cdf851-3b78-428a-98e0-d22c46959bef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a590a1ef-b342-45b6-9d82-da78632e6b60", "sighting_of_ref": "indicator--7c9569fa-21f1-4832-bb93-1a7761ee6d85", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb7281-2fd6-4fef-961e-672ee0ba7b32", "sighting_of_ref": "indicator--d7f51c50-f7d2-44d6-a07f-9a74c9c88506", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c99a9aa-7bdd-47b1-bb24-e84d2576cd3f", "sighting_of_ref": "indicator--f33facbe-fe5a-4615-9c75-2fa8bd859f6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1df036-e59e-4e09-9188-ab7b4893e6c2", "sighting_of_ref": "indicator--7d7b0f1a-0b97-4542-a8e7-3fdb55ab737d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5313bc-c58e-44ae-a035-a721edabbe8a", "sighting_of_ref": "indicator--755d9916-4eb8-434e-b4e4-5ef677ced619", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab66fc7-88e7-4fb7-8597-05e7ea366535", "sighting_of_ref": "indicator--5fbf533e-04a8-4cb9-af10-6e9865287120", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341188d1-fdeb-4ab9-b507-2141239733ab", "sighting_of_ref": "indicator--8693578f-95d5-4b0c-981f-d9bc8cd366a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c1d488-e476-4996-98ad-a5fdf22530a2", "sighting_of_ref": "indicator--2e05c044-5e63-457c-ade0-387ecb4c9f11", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbfd5bc-8a89-422c-9958-4bb6148cc391", "sighting_of_ref": "indicator--8e7ebb51-9b76-45c6-8bc2-8357d0172bd7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adec29a6-8ea7-4cf0-a5b0-80351b07a4f8", "sighting_of_ref": "indicator--e7661477-cf57-4bcd-aa8a-5b92d0da564c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af91cd31-9aaf-419d-827c-53bfb0fe2b20", "sighting_of_ref": "indicator--9805c7cb-e887-4b4a-8988-5ebeaa88f276", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed43c00e-9c1b-4d92-9bc6-c8543c848330", "sighting_of_ref": "indicator--9abc32eb-8bfd-45c3-9d23-f867ff07f4b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e752b3b-8274-475f-a2d1-6d5fce18b345", "sighting_of_ref": "indicator--70aa5eeb-583e-4c9d-b84d-99154ae222ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e499c7-7d92-4748-8d40-245842f5852f", "sighting_of_ref": "indicator--f91f157d-ba5c-46a9-b9ba-c415c25ef28e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d601be-5936-4959-a880-2dd87000c985", "sighting_of_ref": "indicator--5a3beaba-ab05-4a85-bdd8-b980bc7fc477", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985e680a-11f1-45b4-8ea9-3be6abe0b8d6", "sighting_of_ref": "indicator--55217bcd-6236-4636-bb10-a91a7e1e7fe9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b3342e-ea48-48df-a0f7-5bbeb54822e5", "sighting_of_ref": "indicator--c731038f-3b8b-4470-b996-9ff5f94e1dce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33b9b93-4998-48bf-a53c-86b1c7dfad8b", "sighting_of_ref": "indicator--48e15733-ac4c-46e4-8efd-4804000b40a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf22f51d-4b8f-4581-9cb5-2853ed3a7025", "sighting_of_ref": "indicator--6a7f17c1-27a6-4ac4-82d0-d14cdfe48f6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c04160-b855-483b-a829-bec75fbca220", "sighting_of_ref": "indicator--86884fbb-ba88-4880-94c6-2a4e7efd9a57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff840c4-96d0-41f6-ac6a-8cd3b762dbb6", "sighting_of_ref": "indicator--9d094f61-4128-4950-8be5-7cce66c2bd8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970ed0d0-281a-47be-8497-0df67a6c32f7", "sighting_of_ref": "indicator--d891a72e-a920-49a7-b095-d251d4f13d58", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db27591e-4faa-49ee-83be-7e02115a7172", "sighting_of_ref": "indicator--2a03e6a9-9f1a-42a6-bebb-4b437da9d3a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a9607-0274-416a-a85b-7d91393785c0", "sighting_of_ref": "indicator--d3eb4738-e769-4fc6-9f41-ee9e7fbb465a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d1e0b9-8df8-46b6-a273-57478aed2224", "sighting_of_ref": "indicator--66781af0-5cd1-4802-8b2f-e17c0dbecb47", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540eb273-efdd-4ca5-8513-92184db40c9e", "sighting_of_ref": "indicator--cf1efdaf-3eab-4d7a-ab87-8e10480f7bea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6458aa9-d560-4ffd-b22c-fe82b0feffb7", "sighting_of_ref": "indicator--f4769f6d-b99c-4676-8ffe-42c3af8983ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5033ab-f3f7-43d9-8cdb-03a13111a69f", "sighting_of_ref": "indicator--9c121943-fd52-4a91-8771-5017d0857360", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b5f501-1ac1-42c8-a41a-9c64aeba3cb5", "sighting_of_ref": "indicator--5f97851f-f472-4f38-b6a3-5e6a0da566de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411d3184-acc8-4b82-a999-e8526f14e1a6", "sighting_of_ref": "indicator--44b6cfb4-a8e3-4cd7-aa86-d066d42f6c76", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c79315-bdef-448f-b5cb-f17d791c0582", "sighting_of_ref": "indicator--9be39f83-4310-401e-a2ff-978ef790a00a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef6d1f3-dcad-47b1-a7ad-6327d6eb94ec", "sighting_of_ref": "indicator--b664bb52-926c-4d46-b90b-3d3dd3ea44ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262733c-d57e-498a-acc4-63c8b1482c5e", "sighting_of_ref": "indicator--d2c34fcc-5936-47ed-80cb-4525dcc33d7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc07a5d-6c8d-42c4-89b2-62364c13612e", "sighting_of_ref": "indicator--9bb8d891-f030-4987-b908-1868b795d112", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53350c0d-5dae-4a1f-ac5b-0f8851ad132f", "sighting_of_ref": "indicator--7e40635b-e531-4695-b73c-60ceb807b1f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cca84c-3269-4c03-9f36-d0b6f0c4a46c", "sighting_of_ref": "indicator--78e3195f-15fb-435c-9a54-27614ce84232", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af62cd-d069-4d45-98e1-3e9764bc2c89", "sighting_of_ref": "indicator--aa158eb2-52dc-4b21-8f00-40beb1d8e1ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e06a7b-a5de-408c-b274-f21f042c5f13", "sighting_of_ref": "indicator--905d8bd8-e803-4c4d-9400-33c84813e18e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38b9992-3f15-4d0f-9002-1a988817fcc3", "sighting_of_ref": "indicator--04abec27-330f-422d-8e41-c52b00faf5d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bea85b-6442-47b0-9a19-d0afce79d155", "sighting_of_ref": "indicator--9beb347a-7220-41fe-ae56-b7e36a12979b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4431d6-4fc0-48a9-b498-ac9c090da6ec", "sighting_of_ref": "indicator--24b9c4a8-d535-4b52-a6be-2ed3ea4afd49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59453a89-4e7c-40bd-ab79-96ee99af915f", "sighting_of_ref": "indicator--46a70014-a644-44b0-8502-8eb410eaccf9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9946ac4b-bcd1-4133-8808-3cdb77173ded", "sighting_of_ref": "indicator--47e2d9fc-0c05-4d54-9519-db6809038e1c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba30ebb-0d2e-4ded-911b-c2ff6db3d44e", "sighting_of_ref": "indicator--ceb3f0c0-8863-4141-a4c6-55f951847ad9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c371629f-e67a-4a87-948f-021256cf8828", "sighting_of_ref": "indicator--0c3e5ccb-92f5-49c2-ace0-4cd49e4b11a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a0aa4b-3384-4f85-9142-fdf6058a2ec8", "sighting_of_ref": "indicator--763968e9-71a3-42f8-a5ab-1c75306e1fa0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0436da1a-045e-4148-bf6a-f9e56dd9fb1b", "sighting_of_ref": "indicator--bb28a719-1891-48ba-80f7-5fc3b0e556b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059672c-16ca-4c2e-a249-53f23c041c7e", "sighting_of_ref": "indicator--759bac42-0a1a-4637-b260-7d4267ee5ebc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a66c3b-f58b-4fb9-9356-0eb34e01a1f7", "sighting_of_ref": "indicator--52e55ece-73eb-4091-a548-b6d5bf8823d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d4b11e-bba9-4fa0-8354-abf0f7c64c20", "sighting_of_ref": "indicator--ef01dac6-95b2-4c38-a7bf-10e4795fbc39", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d729519-74c9-484d-a2dc-7fc6f10019f5", "sighting_of_ref": "indicator--6d4f4e38-c075-4f86-aebe-03fdafdf2388", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979d6865-a885-4a86-ae0a-748c7744ea20", "sighting_of_ref": "indicator--fb69fa4d-b027-45cb-948e-7220f7af03f2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2e78b5-2657-4d21-926a-e801ba55c8b9", "sighting_of_ref": "indicator--a2f932d5-3770-4764-9c5a-c766040c0954", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a9d7e4-c426-4dc8-b210-31c296225681", "sighting_of_ref": "indicator--8974209d-123a-48a6-a88c-03f47e355544", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4827a8-61d8-4c5a-98bb-7ab854fcb301", "sighting_of_ref": "indicator--3a50d759-a263-48e1-93e0-a53582461fd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c3d4f5-4ed4-4c9f-867e-85d19cce9114", "sighting_of_ref": "indicator--91f31af8-e956-4ac2-a223-d560323eaa6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c401ef-de4c-4d1e-b182-89be656f993d", "sighting_of_ref": "indicator--6dc37199-2d0a-4f4a-8f5f-13dad48b777c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c9ce9-7a98-40f9-91ca-5ee035c96071", "sighting_of_ref": "indicator--5beba203-4296-485f-88b5-0b6879ecce60", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e916423e-5bc9-4b21-bf9f-f746eb6dc4c2", "sighting_of_ref": "indicator--0251da73-bfd2-41d8-8f07-1486e8fb3515", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a998a3-a3dd-46a9-86aa-159aaffb38fb", "sighting_of_ref": "indicator--7235c87f-360f-4a8c-9ed6-c9b42d2cec10", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988779b8-bccb-411f-ab41-2a0a8a43d403", "sighting_of_ref": "indicator--a9a46064-57bf-4b20-ba09-041f898061ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3ec671-6eb6-4028-be85-dc88acb306f2", "sighting_of_ref": "indicator--78f1c58a-64a8-43c1-8116-744d1bad7971", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540d4521-766c-4bf8-bd9a-47e327bc2dc5", "sighting_of_ref": "indicator--f1f2ecf1-ddd1-470b-a430-182fbafc1cc3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fddba9a-f9f3-41d5-9624-2219194e335e", "sighting_of_ref": "indicator--61e4e97d-608b-4f4e-a500-652124ca3232", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226a215-d30f-4b77-a67a-fa4669c0a677", "sighting_of_ref": "indicator--08398d82-3321-4879-ac5f-473d7c55aa1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2781d087-fd58-4baa-880f-ddf46b520740", "sighting_of_ref": "indicator--9763cd24-1e06-4435-8f82-35d20b62c68d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af868d0-1fda-46bd-af40-de7092484123", "sighting_of_ref": "indicator--2f60fe4e-98f2-45b6-a01a-b4842a089a50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c3496d-3425-4cbb-a895-ab438888387e", "sighting_of_ref": "indicator--5dc95624-75f2-4875-adf5-99c0fc0a8721", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47082e76-6b5c-446d-b2e6-1c60bcd6d214", "sighting_of_ref": "indicator--5cddb66a-abfa-439f-b14d-c428479ca6f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5f8d9a-418f-4232-b875-028f8fa892a2", "sighting_of_ref": "indicator--54ced3ee-a0d3-49c2-9e7e-626084856872", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc4ccc-82c2-4193-b985-124e3f0979e8", "sighting_of_ref": "indicator--9e94ed70-5dbd-4949-82b2-c22e6cbd58dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b46983c-9f05-4474-ab1b-8b07a47c05b9", "sighting_of_ref": "indicator--4c282671-215b-43db-b548-1786e4a3ca8e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890bf73e-089d-4258-9457-eacb1148eb9d", "sighting_of_ref": "indicator--67cf42bd-cd84-4d00-81b9-0734f3c73fbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be86572-6da0-488a-adf9-05af7c5a2131", "sighting_of_ref": "indicator--7bca1df6-7dd8-443f-a447-6fdf01da6cbe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eabbd1-207f-4031-873f-25f84b3e4bba", "sighting_of_ref": "indicator--c2f809b0-557f-444b-a6d3-8366d2894d06", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3ec282-4661-4151-a07c-101c6905ea04", "sighting_of_ref": "indicator--8002ff01-f87c-4266-95e5-14d7e7d20d8e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab58bd63-607b-4a61-8543-d05eb0e3c77b", "sighting_of_ref": "indicator--49b69950-06cf-478d-8da7-6764dae3372f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82fb835-496e-4ff9-aae4-885714a3fc1f", "sighting_of_ref": "indicator--ba025bf2-d254-4b21-b15e-8d98dcf075ea", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91752aa-abe4-467d-ac41-a068dd47f382", "sighting_of_ref": "indicator--fc6f599e-d793-44d7-be52-76d23b1e9e22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e22983-a9d8-4d7c-88ca-c64d2e796889", "sighting_of_ref": "indicator--b5d2d58d-795a-4dd1-92c0-2820373ad147", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52905952-2e96-49bf-ad73-627b6c112926", "sighting_of_ref": "indicator--aeee0a1b-4bb2-4cac-8c06-0d57c1ae2383", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc571ab8-11dc-4b82-a4f6-9528006bb185", "sighting_of_ref": "indicator--c022ba27-fc00-4954-9708-bce0aa577e15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56452b6-8ea3-42a3-bd29-d2ae36e78d33", "sighting_of_ref": "indicator--a0aeb549-d5ce-4de9-a2a9-bef9bd8be3d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4bca73-ac13-487b-8a58-00fb55bf705e", "sighting_of_ref": "indicator--9722a463-9bf2-4c70-9d87-5ad30f26094a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac032a3c-467d-41f4-afb3-0fd7f0333c78", "sighting_of_ref": "indicator--c4748a21-b591-481b-b238-1ce2dfa91cf0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72ccd38-a440-4083-b999-042c4f16407d", "sighting_of_ref": "indicator--e0d137f7-02a1-458b-a899-44512018971f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bc5ee0-80b9-46a5-8e36-ce657205a0c7", "sighting_of_ref": "indicator--be3f5bd2-22d2-4209-ba5b-41d4102d5c14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad95e3-4b2f-4398-880f-6e1d075dab2a", "sighting_of_ref": "indicator--432333eb-bc15-4c20-a232-2494afb7f18e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c08cc-a857-4415-a758-ffe73c263bd1", "sighting_of_ref": "indicator--0403432c-8e81-4d70-a65b-518328b6d1a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5623034b-c675-4e59-a20f-068a1d9e5f97", "sighting_of_ref": "indicator--ae34446d-dba3-49ab-92c2-bb9ea24e71b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade155f4-91e0-4e8d-b7aa-66bd4a35b2a1", "sighting_of_ref": "indicator--65750ee4-e554-4874-9f75-0cd39451ffaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5082692d-1ac3-4583-ad91-be7b2e2e5c73", "sighting_of_ref": "indicator--c380bd09-5010-450e-a1be-e634be5ff1a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09390b4c-a4cd-4c9a-bb31-a16b119abdce", "sighting_of_ref": "indicator--7d5feded-5195-4248-8afd-09c7b002089a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadf5142-f9f1-4524-9750-ac5d67d80934", "sighting_of_ref": "indicator--b4b0bbe0-8e7f-400f-ae0d-570e11464cd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df689369-fb89-4b3b-b637-bf78e780b5a1", "sighting_of_ref": "indicator--3091212f-a93c-4e8a-8036-0e239fbfb7b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdb831e-c197-40a1-8c32-bfb9c87793a0", "sighting_of_ref": "indicator--62c19b0b-fcc0-4fa7-b649-839a31930aa7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e816af5-66e7-4bd7-b271-cc0643b14e07", "sighting_of_ref": "indicator--c75587d7-ac5b-43dd-bd6e-4224d45a596a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5861c43-f931-4de8-93d7-bf1f51ef9969", "sighting_of_ref": "indicator--c147ba00-0aa9-4628-b252-500a0b0f3c71", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc5e15c-f2d0-4ce8-97a6-162abd0c20f0", "sighting_of_ref": "indicator--3ec8292f-ad26-43e7-860e-897729c7bf6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afb4241-46e3-4107-b9c6-4f5ae84ff4be", "sighting_of_ref": "indicator--17a47386-052a-475a-a431-0b71398086f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860d7ce1-6cfd-467c-b55f-e69683196b8b", "sighting_of_ref": "indicator--d0fdb0ee-5bec-40d7-8bb6-a283efe07b0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240e23be-84ec-4e76-b9cc-91a174639af4", "sighting_of_ref": "indicator--b172fa25-07e1-4892-889b-93e356a90406", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6513944a-2fc3-4d98-8d47-3b5994d9f7f9", "sighting_of_ref": "indicator--30d5f6d2-38b8-4f09-8552-95eddf396ff2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97bc9b8-974c-46f1-821c-13a063a80c32", "sighting_of_ref": "indicator--3e02b961-fbb0-4aac-8276-b7914c9009ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776780da-ccee-41f3-bbcf-02472fa5ff0b", "sighting_of_ref": "indicator--3f6b8a7a-0a75-4887-850c-2211970f84fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7c582f-03ee-43bf-97a8-68aade275ce0", "sighting_of_ref": "indicator--b0f060bf-e069-4392-ad93-d3767be8d727", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6058f7e-46cb-4d3e-a399-0f8ecd915251", "sighting_of_ref": "indicator--6325bece-1780-44e1-a4aa-3355355a486e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15e3a2a-234c-4ded-b3d9-7c8885a66c68", "sighting_of_ref": "indicator--9addff5e-dec4-4ffd-a602-848d855b6c68", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcf4b90-60e6-4200-9850-c9cb2342ad74", "sighting_of_ref": "indicator--549e1955-1b95-4157-8dc7-57fad714029c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7dc768-0151-4f9f-bbd1-6fa49cb3d1b0", "sighting_of_ref": "indicator--64db864f-427d-42b4-aae9-e31ad4d5c77c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7b1d05-c77d-482f-88b0-f9a1eb077f1d", "sighting_of_ref": "indicator--6b10ea81-6ca6-4551-8c27-d339d631f2ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902d21e1-826d-4ebf-abec-70ca0cc23f6b", "sighting_of_ref": "indicator--e7af5ff1-e4ab-489f-80cf-f7d4d6b71d93", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f264175a-35c1-477f-9c88-9772b60b3baa", "sighting_of_ref": "indicator--2b0ae94c-3066-429f-859d-9b454d5a5436", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915d201e-ca51-4da9-b751-4b8e95d1131d", "sighting_of_ref": "indicator--d8c15d99-1e31-4fcb-92d2-2093090b67f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eced54b7-03f8-4862-87c5-d2a6b0ad233c", "sighting_of_ref": "indicator--183c4700-476d-49a8-9e05-3263306e67ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2792842e-ea83-47ec-a6a0-7ef7710f11da", "sighting_of_ref": "indicator--979c35f7-c95c-4028-98d6-2d582c683912", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be313ce5-1da0-44a7-96f5-5e1f81eeb5f3", "sighting_of_ref": "indicator--a04d55d3-5ca1-4c39-8e83-b21ce965c01f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71f39b0-5ada-44f6-b2d3-030cd947e558", "sighting_of_ref": "indicator--332aa089-0c20-4b1c-aa4b-3c13f93c8201", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d7d4a0-d8c4-454f-a5f2-ded2dea0c4b0", "sighting_of_ref": "indicator--cd9f2c80-d6eb-4a3f-865f-2fd260a55773", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fddf53-eda0-4d6e-bf0b-76e6b03f4c8b", "sighting_of_ref": "indicator--dfa709fb-d9ad-4905-aa59-73b1b5a4cd36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5b1c4e-e1a7-441c-86d3-b5f69ed267e1", "sighting_of_ref": "indicator--98fbf004-76b9-49e2-8ce1-4cdaf89f6e62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe59b76-3178-48e3-9586-0f7e3568bd48", "sighting_of_ref": "indicator--58da1eb5-b3f4-42ad-928b-921e88815a8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edfbe50-aae5-4d35-8e0e-91c58db120e9", "sighting_of_ref": "indicator--d40996a1-a1fb-481f-bbd3-6e50c7c2c182", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7359451d-41e1-464e-bb5d-5c8ee3d467ff", "sighting_of_ref": "indicator--8b42654f-83bd-4d6f-9db1-1cde1565ec1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e8e6d8-c6a3-4070-a83d-df9bad446692", "sighting_of_ref": "indicator--34136bb3-3cd0-4dbb-8c4c-722862af63c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3880f7-9697-49d1-bab6-08a19202957d", "sighting_of_ref": "indicator--92c2a508-4609-4b6f-a5bc-a63e5d1e3177", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699997f1-1df2-4814-a812-cfb870d8de37", "sighting_of_ref": "indicator--dafa5286-ccce-441d-a802-1ef87905a4d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b94bd-356a-4acb-a564-67d36b5c9c21", "sighting_of_ref": "indicator--49406036-c060-4937-8499-086571ea0f2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f20b65-96f3-4531-9fec-4d8489cce39b", "sighting_of_ref": "indicator--362a86b5-01e3-42e1-8592-d71da3601be3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa963165-3c55-41ba-8ceb-9f7c5f7efa76", "sighting_of_ref": "indicator--7b394132-f970-4574-853e-6b2b9266075b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3a3d8a-1839-4c0d-b44f-f5c85c74ce0a", "sighting_of_ref": "indicator--175cef26-9868-43fa-98d4-b71a1e970e07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d70bde-e0e4-40c0-af0c-d858266cd25d", "sighting_of_ref": "indicator--ec6bbb1d-f743-44ee-8818-ea3ed4869b5a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfbed97-7871-4d81-98a9-1be01b1f6363", "sighting_of_ref": "indicator--9f84fec5-135a-46aa-b330-c20d4ebf3d53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6012bb-7db6-4a2f-9a21-8f5d14a7761b", "sighting_of_ref": "indicator--a2e7fdad-4d19-4e99-a26c-9717bcf08ad0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfae0d9-fb55-4d2f-bf3b-e9a3c5ae24b5", "sighting_of_ref": "indicator--fb902ab2-e9a2-42a3-b46f-d887264ee1ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d26db9-a0a6-4fff-90d5-c353dd4b247a", "sighting_of_ref": "indicator--36faa058-e552-44e8-8e58-33fe46a3f301", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb6295c-303c-4fff-a696-d113c7344beb", "sighting_of_ref": "indicator--5d49143b-bec5-4cc0-9137-5bc1f4e25667", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455738ac-a484-4e68-835a-6e982c0c9cc9", "sighting_of_ref": "indicator--7f8aa3ac-2721-4972-9e31-c3d24d7c49f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca39ecab-f37e-449e-9eab-ed7e06ae1a57", "sighting_of_ref": "indicator--83bdac42-c7cf-49d2-946b-ea00e9fc9c25", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84c52ad-73b9-499a-af7a-09a54abcd268", "sighting_of_ref": "indicator--9a43d067-7c14-4e90-b941-653afd55da79", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87d3ee7-d915-4c1c-ade9-1ccee2755057", "sighting_of_ref": "indicator--4b3b58cb-3245-4f93-83e0-0e2cf6d9c9f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072cd9f-5044-4ae0-8870-6d571aa98527", "sighting_of_ref": "indicator--9d4c8712-ea37-4eb0-86a1-7cb8f7c8ee9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae148361-0a34-4859-8743-db9236c8cde3", "sighting_of_ref": "indicator--a3846aed-9a47-4951-a6a6-d7798eb800d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3889021d-2209-4cd0-85ec-01232b4137f0", "sighting_of_ref": "indicator--f505ae75-641c-42ea-ac01-c8363ff52b4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e25886-ee69-4bba-a55c-18ab162dbae1", "sighting_of_ref": "indicator--cedc4ae0-505f-4aad-8476-187bce7fc586", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3606724-446c-4b43-9493-f7195172212a", "sighting_of_ref": "indicator--6d3616db-bdda-4eef-b90a-8b227d2ec098", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5a1ca3-7355-4569-9d10-e0853ad80f63", "sighting_of_ref": "indicator--2a9b5729-ec32-4d03-8876-4fb4d2852cdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93234507-3a6c-4423-a7b9-25dcb790ede3", "sighting_of_ref": "indicator--31e94898-82d3-4492-8768-7f3c968dce05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd4b060-a511-4f93-9350-a2109a57942b", "sighting_of_ref": "indicator--20f99263-1ad8-47c3-9d00-223419563bba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2774367-f648-4bcf-ab98-39627f253999", "sighting_of_ref": "indicator--afa607b1-0d55-4564-8fc5-062387018932", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b365b1c0-cbe8-4e25-acce-53eada3a6ac5", "sighting_of_ref": "indicator--209728f7-0c54-4437-842b-60ab21038a77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e585b3-8896-4664-b76d-dbcdc325f023", "sighting_of_ref": "indicator--cb0999c5-6f5d-4f5a-8382-4728bcb3b1a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6ee392-6e8a-4a86-8554-0d15545d8879", "sighting_of_ref": "indicator--21c593f1-435f-4c90-8d75-be7a0b3e881f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad826c3d-0391-4c16-81b3-6dcb2994b3c9", "sighting_of_ref": "indicator--5e86c746-3b3b-48e4-be29-39f760a71bbc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4144d1-e60b-4db3-bf77-41d6b904f3da", "sighting_of_ref": "indicator--9843dad3-3407-4c17-8748-c0eccd5a78e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db17cf1-5bd5-401e-86aa-949e20c2248b", "sighting_of_ref": "indicator--64dad2a4-515d-4b25-bf26-36b9a807dc13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f2cee2-de8f-41ed-8ebc-c27d391cc85a", "sighting_of_ref": "indicator--66a2b031-45e7-4afc-87d7-d78b0d91942d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b39b2b-3038-4463-b849-f9c6a4f052ca", "sighting_of_ref": "indicator--cee204df-074f-42a1-8c9c-84b8b7c1bfd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c15d24-c465-4557-8237-d9b882e6874d", "sighting_of_ref": "indicator--e5eda4d6-d2f7-4dc5-b8b5-a80241442ea7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48034a69-4734-46d8-825f-ada15009fb05", "sighting_of_ref": "indicator--608ad992-70f9-4384-9313-85f2f84b6969", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c26ca0-ab1a-4eff-828e-23ac75f1f4db", "sighting_of_ref": "indicator--fe183854-106d-43eb-b3cf-140107508c0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf0f340-25ba-43c2-a292-b359b6c0d8f1", "sighting_of_ref": "indicator--af38f9a9-a7f4-40fa-a07e-4558762a168f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9180d1d0-5224-4230-8a06-897f10dbf897", "sighting_of_ref": "indicator--bca6f68f-8bea-4da6-bf3c-56259b39321a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a0656e-ebd0-4537-b155-394f8621b852", "sighting_of_ref": "indicator--ce0e805e-2918-4828-bd74-324c9aca7adb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490973bf-35dc-4164-91ca-274c3e4f1e02", "sighting_of_ref": "indicator--2eca20ea-7fc6-44cf-b41b-88332bd18b6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68153812-affa-41f1-b3c9-fef47e6a53b5", "sighting_of_ref": "indicator--6c589a09-e396-4583-996a-c98d145bf0ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76a7b8-f93a-4257-969e-8f94a6a1aecc", "sighting_of_ref": "indicator--c036db63-967e-444b-9429-6728a996d454", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615a7395-08f0-45c4-b5ad-180e478d26ce", "sighting_of_ref": "indicator--696b2148-5ffe-4302-b4e5-1b747f208eb1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69765019-5a00-4494-8971-8c1f4112e13c", "sighting_of_ref": "indicator--dc76dd6d-f7d3-475f-9d8b-9d7f880263f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f70c5-c308-4b81-a149-50cc78a88c7c", "sighting_of_ref": "indicator--61337342-3759-4bcf-9962-3daf4a778f59", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abacff83-5e19-44c6-90e2-043dcb59a756", "sighting_of_ref": "indicator--7fc66eb8-134a-49b7-a2a7-b07b7b5db904", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4a9d56-15c6-452c-acf9-22d54d36c673", "sighting_of_ref": "indicator--c0ffae65-af32-4f08-b1bb-ad1790fffd17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70425e78-4ef0-4b70-9101-a6c9ce6bf15d", "sighting_of_ref": "indicator--bbcc9046-0e55-4454-8c4b-69c5f708e18c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea61002-4acc-464a-a137-c320d94cd845", "sighting_of_ref": "indicator--db3763f2-26cb-4bf4-905f-fb69f5496b26", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f8c1dc-df9f-448e-9f46-a0a947032c9f", "sighting_of_ref": "indicator--c1da22d0-2249-44fe-8b48-8c891de2fe7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12af1c1b-b17f-4481-b560-ef61a0ea0199", "sighting_of_ref": "indicator--dcf4f026-c631-4fbd-bda0-162444c58f3f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c592a641-ba78-4cbb-aef9-4571d8f87f10", "sighting_of_ref": "indicator--5fcd05d8-a19c-4fd7-af37-2859e1f04416", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a053de-dc0b-4568-922b-142b0ec11e77", "sighting_of_ref": "indicator--a1c390d0-4ccb-4f4a-afe1-2659f2c4ce69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868da14d-6ef3-4f9d-96ae-b918fe304f44", "sighting_of_ref": "indicator--3a319361-cd92-4fba-be67-c6c173faca60", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d8816f-88c6-4207-a9ec-c592d2d5d1b8", "sighting_of_ref": "indicator--d76da208-7fd9-41f8-b540-5282d007d7e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f840439-890f-4bfa-89e0-42f16a890ba6", "sighting_of_ref": "indicator--94cf8aa3-e2df-4303-8a68-c84f9d649b40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf8473c-1961-4bf7-a24a-38258a3a5727", "sighting_of_ref": "indicator--4fa58e75-9eb5-4e6a-bea8-b7906e62676b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea9744-52f7-471e-af39-db6054d62b9b", "sighting_of_ref": "indicator--0c71325a-96c4-4847-aa12-595996c7801d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a37434a-3e56-47a9-acaf-dbd680b536c7", "sighting_of_ref": "indicator--6b450f4e-3daf-4223-9cbf-310d5157e028", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb4f975-1673-4f4b-8eba-97342a223950", "sighting_of_ref": "indicator--fb3b3d3f-7aaf-47ea-b3d3-f4804ae79017", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08ab509-1683-4b50-b00d-41720c008378", "sighting_of_ref": "indicator--817f0039-bcc2-47e5-a472-f33aa43ca824", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e069281e-7859-4f77-b11a-dcc284fa70f5", "sighting_of_ref": "indicator--51df39d4-f36c-46fa-8eec-372b022812eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e235f051-9b22-4981-b3c2-4f388e282a38", "sighting_of_ref": "indicator--6b084dd6-3e21-410a-9948-974bf9b67107", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c54752-b143-49cb-8b0f-0bc67aac3277", "sighting_of_ref": "indicator--22dcd83f-5d2b-4d69-bc07-c30b55ca62c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525b763a-66df-49f2-9a2d-9cffbd565bd2", "sighting_of_ref": "indicator--c0d033b3-8e2f-4acc-ae9d-632447ec06d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d9ca0e-ecfb-4d73-8def-ae31c0d2bbda", "sighting_of_ref": "indicator--801c147e-5de7-4e86-8683-01e9d4fdd8f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b849495-9e87-4559-a8be-4b1465e3c167", "sighting_of_ref": "indicator--7b886d95-f406-456a-a6a6-0c79bc6e06fc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0236a2c3-b636-4c4d-bef4-65ddda355dd3", "sighting_of_ref": "indicator--82671ec0-db37-4630-ab1e-f9521f0c7640", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935f5cfb-16f9-4637-93a5-019dde9b5d3f", "sighting_of_ref": "indicator--c4a3a0b8-ee88-4c85-afe0-f5a6314de64e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9012ad72-a4bf-4bba-875d-c2ccb27750a8", "sighting_of_ref": "indicator--b8582594-589a-450e-8eec-c377be5a54ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca48361b-1f9f-493d-83d9-aec6c31d68f4", "sighting_of_ref": "indicator--e4f2d58c-45e0-44f6-9ed2-3b949a4fbad1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676dc2fe-fe25-485c-8f3a-e9687b1d31e6", "sighting_of_ref": "indicator--bf679104-43d7-48e8-9f18-25ddbdd8ca2f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ddbcbb-7b72-436b-b31d-ee5287df5382", "sighting_of_ref": "indicator--b15da2b0-0bcf-4b0e-ae22-16fd40c6f255", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3a81ca-8449-4493-b816-8778721a4527", "sighting_of_ref": "indicator--29588fc5-7805-4347-ab88-0992d649d341", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401742cd-6dc6-46f9-bd1d-ec878471babc", "sighting_of_ref": "indicator--6939a0d9-f257-4707-8d46-af65b3d89fdf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0591182-de58-48ca-9372-b94980a51a43", "sighting_of_ref": "indicator--0e7ac958-4fbb-46cb-9e3a-3d98ce0757e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc2f33-b978-422f-8049-41b37321f476", "sighting_of_ref": "indicator--bce4ff5f-a01a-4e96-920f-bb16eb17bb30", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef172c4-bfd7-4f70-9ccc-5b98eafda0db", "sighting_of_ref": "indicator--1ea4efb6-2545-4d82-b9ad-223504be145b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249eb65-ce9e-4ba3-ac7e-48bb1454d2e6", "sighting_of_ref": "indicator--a0986568-524c-4ac7-9396-5b6a3bf9b4eb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d09f8e-e141-4a32-9bc9-666845e6460d", "sighting_of_ref": "indicator--609d1fff-978c-44e9-8d6c-93200415dbbb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5053a8-16d6-4bb4-8c40-05a342099b14", "sighting_of_ref": "indicator--4cfa6c4d-df8f-40d1-9953-a921a82c0e9e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781a744-bdf6-4bad-9251-baec406da59f", "sighting_of_ref": "indicator--be916af9-6d36-46c0-9c1d-950f66d13ae2", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33acf272-bc3e-4568-a796-d6af05d74314", "sighting_of_ref": "indicator--be916af9-6d36-46c0-9c1d-950f66d13ae2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da058df7-4b64-4623-9933-7bcf4613a549", "sighting_of_ref": "indicator--cea0b831-448e-4155-a824-6b978e1ba024", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d45bd-2d0f-4b3a-897d-9fff7b434da2", "sighting_of_ref": "indicator--6e86e9ed-1517-4f83-a2a0-9693ecb84120", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872d1b5b-c57a-463f-a2d4-62520bb52699", "sighting_of_ref": "indicator--6c69f495-4f7d-4362-953f-0fc171389285", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95415bc5-21a1-4523-8b35-351d63eb97f3", "sighting_of_ref": "indicator--71d1a311-f846-4d16-b93f-1698095e41ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bec5f6-8c34-46e0-b952-3c8d784c7085", "sighting_of_ref": "indicator--dc331a31-55f9-4ab7-a2c2-fe61190e2fc8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb5a46e-beb2-43c0-ace8-18d3d5b6a580", "sighting_of_ref": "indicator--aaa70c03-f8d1-4f48-925a-b883dff02ffc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1280d7-f8f4-4c25-b4ee-55fad0016f59", "sighting_of_ref": "indicator--a8e66c01-2070-4f6d-95da-65a3b97143c0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89f2046-ac17-47c1-b595-849128b0c2a8", "sighting_of_ref": "indicator--55c39fe7-d9b0-450e-811e-2b920dce5065", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a23ea1-2697-4bb6-a833-5b9ca89daa05", "sighting_of_ref": "indicator--7c6a5d33-4d39-49fa-9700-9561dc7306a2", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4099ff9f-0b6c-454e-b467-4e850ff112e0", "sighting_of_ref": "indicator--882deb9e-7379-4ed6-9505-35ffb86dbc75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1b1ee3-0f34-49c9-b4e2-07a7fb4762d2", "sighting_of_ref": "indicator--e15a5e94-ae80-4078-b49b-2c21cfef335e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aff7ee4-9b6b-44ba-b1a5-5fb9a1a7d857", "sighting_of_ref": "indicator--b3987858-7b3e-4346-b4d7-70a3fca8e480", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1fc320-bcaf-4e7c-9b50-8eb3e4f32c0a", "sighting_of_ref": "indicator--b3987858-7b3e-4346-b4d7-70a3fca8e480", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4b6ddb-422d-4101-816f-ecfa962bc75f", "sighting_of_ref": "indicator--41589d69-bc1f-419d-9236-6ea775053ef0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c82cf9d-c5de-431a-83af-318d24927f83", "sighting_of_ref": "indicator--0a043015-82b6-4ce6-baeb-9aa9ea21b54d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eadd232-f79d-4e98-992f-2a46604580bb", "sighting_of_ref": "indicator--38104e95-b052-4eec-b894-da3b681e33a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9a68ed-e40c-473b-8ff9-b9966050b6e9", "sighting_of_ref": "indicator--f7530bfd-a171-455d-b7c5-3971904a1da2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01522e06-ec15-4ff2-8c78-875689499c1e", "sighting_of_ref": "indicator--9a634caa-3d4b-44cf-878e-54faf5b00951", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae762b7-daf5-46af-92af-13a12839a315", "sighting_of_ref": "indicator--7e099542-bd12-4bba-889e-0da02eec10b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bade49d3-fd74-4947-9d8a-e6b27237c983", "sighting_of_ref": "indicator--451af9a8-5675-4338-94fd-1c72fc2a966c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4aba4a-6416-49a0-bb14-d121acd93cf3", "sighting_of_ref": "indicator--bc1b15e0-3e10-41f7-95fc-51f469525cd8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b82de-4eb7-4004-9235-ba8a79a40770", "sighting_of_ref": "indicator--fe084f65-feac-4829-b13c-08d2790ab86e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbde1a2-86aa-4a59-b237-68f902bcb4be", "sighting_of_ref": "indicator--bd9fa65a-c984-4688-97bf-e12066222e2e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9289b836-5e51-4f0d-bd21-9f1f030f7f1f", "sighting_of_ref": "indicator--78b0a14f-1d92-4ea1-8264-7077340447b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdc2e58-a55b-4fdf-be68-3dfad7c689d0", "sighting_of_ref": "indicator--c14d7311-54d9-4201-91d8-59852231bb53", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3f1111-1bd4-4652-a2e0-72df9d4c143f", "sighting_of_ref": "indicator--7b0c9663-8bd1-42ce-aa1f-d0ac4a036427", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2bfb41-ed33-4c55-b820-19d24c054c63", "sighting_of_ref": "indicator--88230aac-80d1-4c1a-b709-5382d9758bef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e68e26-9e1b-4736-9a2a-f06113388038", "sighting_of_ref": "indicator--aaf35ab6-7059-4684-a11c-0f01ef005352", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341a0df-3853-4037-8bf0-f004e57a52f3", "sighting_of_ref": "indicator--5c8ca210-5485-42be-90a4-fb923bb4a274", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1caa110-0b20-45ed-ad59-aa360893c409", "sighting_of_ref": "indicator--30e966f0-25d1-49b6-89c6-f7d367480049", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2839b373-be80-4269-a375-d144a166a787", "sighting_of_ref": "indicator--a579e3ad-7c62-45e5-bd76-30e103594a58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6f39d3-7474-413b-99ef-b7b32e53964e", "sighting_of_ref": "indicator--4198f39f-a4db-4b2a-bdbb-d5a2c1f2b1df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7786198-439a-4456-af3d-f2d7276bb4de", "sighting_of_ref": "indicator--5b44d9e1-01c4-4e50-b7fd-c7f41970dc87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d79ddb4-db7d-486d-934f-aad1477439bc", "sighting_of_ref": "indicator--f050938a-ef46-4df1-bbe4-5b825d7e2918", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4b293-99c7-41d4-805f-af17f1423f0c", "sighting_of_ref": "indicator--095a3a4d-9241-42cc-b9a2-d9cc10b52f90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6560156-69d0-4811-b365-355a408041aa", "sighting_of_ref": "indicator--fde1cf8b-110e-4dd0-9b2b-122e5e80b97d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b433d2a-9a53-428e-b1ae-4bf8cb248a40", "sighting_of_ref": "indicator--d4c38fa5-d3ce-457e-a3a8-39761134496f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8a236-997f-4576-a693-2b417fb5502c", "sighting_of_ref": "indicator--1c1d05ad-9f85-4abe-a756-880b74fd8641", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a259a3-ab1b-4d92-b3fe-8ec0e70910c7", "sighting_of_ref": "indicator--bc5028b9-3b0e-4892-9595-cfb3d95e6f9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073f929f-277e-40fb-aff3-d3c9b3b016f9", "sighting_of_ref": "indicator--66d73dce-7161-4f57-b131-a70e1c20d487", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc132452-d52b-4c3d-ae00-8cd135eeebe5", "sighting_of_ref": "indicator--447cf199-eca4-41e7-8d98-9cc996e8b778", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ed456b-067b-477a-9583-b28b9867a380", "sighting_of_ref": "indicator--337db618-55c0-482a-9e7d-9aca75875ea5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72caf884-6cec-48f6-8dce-a71e035588e4", "sighting_of_ref": "indicator--4c08968d-4fe1-48bf-9c7e-a54b6bebeddf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64afe324-6cfb-4fb0-aee3-7b85c09c2a54", "sighting_of_ref": "indicator--94487ebb-85da-4426-a9c1-9666bfc95b18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d79f4f4-6cef-43f4-8cb2-61dfdea47c24", "sighting_of_ref": "indicator--be9af8d7-dff9-42de-952f-ff66f2b955e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1370467a-860a-421c-a74c-8b3c4d832292", "sighting_of_ref": "indicator--9afe1fbf-7733-4f6a-9eec-8df5afc6394e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9d66eb-6ca2-4cc1-9711-aa288aa0c6dd", "sighting_of_ref": "indicator--d580ed8f-a365-4645-8bf3-29cd288c3871", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44653991-dc4c-4866-b49b-9990fe26b5a5", "sighting_of_ref": "indicator--68f10dc4-ce6b-40a2-b039-3cee9f2fb0a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d7e982-0a2d-4c03-a54a-058cb5dd17c3", "sighting_of_ref": "indicator--771fa962-e840-40dc-8fcd-106947a0966d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a14266-b0ac-4b3e-817d-b428d0f3e547", "sighting_of_ref": "indicator--58bbda84-f2e8-4d0d-8972-b5fa9a9814ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c444648a-7528-470b-8cd1-376017e51c61", "sighting_of_ref": "indicator--5cd119dc-6d09-42a2-88a1-91b085e9fc89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b351630-a097-458c-b9e5-a97f62da5f5b", "sighting_of_ref": "indicator--8cfc5b3f-c3f0-4caf-92fe-9292621387be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a9274-9976-4b7e-a9ad-77bafb40f7ae", "sighting_of_ref": "indicator--c17eeb1d-21b5-4fa5-a0fc-e7e7ac84c11f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2480b190-5cad-45c8-affe-a3c6b8e9ddca", "sighting_of_ref": "indicator--698b004a-e76b-42eb-bc8d-cbb6a769a10a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617e4e86-6e48-4d5f-8063-9dba8fbce47b", "sighting_of_ref": "indicator--167c76c2-cdd3-4392-9a7b-5bda469c7ac6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e5408a-9d48-45fd-b819-1a82ac0d792d", "sighting_of_ref": "indicator--af4bd19d-b4de-499e-838c-78e1e6bf77b4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2ccb05-5bf5-4a0a-bc91-7afb3918ec2d", "sighting_of_ref": "indicator--8aa146ed-9d92-469c-bacf-03ea9ac94b9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fea891a-88bd-46d7-b1a6-6264d04d8250", "sighting_of_ref": "indicator--7a9bc33e-e974-4398-b41b-9d84c0522024", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41373a39-9c86-4230-8a3d-5ac6f004bc16", "sighting_of_ref": "indicator--1df84dd5-4113-42f3-afd1-1f02ca306299", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242d1616-c4ff-40db-89fe-048eae23380d", "sighting_of_ref": "indicator--23cee534-afcd-42d3-aea9-df6cddde90dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18486ad0-dea0-41f7-9b7b-1c3447a5274c", "sighting_of_ref": "indicator--5ea7408b-9ab1-420d-bc5e-fe07a21a1ec6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e701a34-6cea-41cd-8700-8b4392e6d922", "sighting_of_ref": "indicator--bc5c66aa-2679-42e4-b909-f1868acc0a2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708ae8df-7078-4c0c-a22c-2724d758e15b", "sighting_of_ref": "indicator--3fb5a073-03e8-4225-8015-a0287bc2f558", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc03213-0e4f-40eb-abdc-88dabe1a5742", "sighting_of_ref": "indicator--beca1618-26e5-4ebf-99b6-84aab5103400", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e79d402-ad02-45a3-ac15-371575765ee2", "sighting_of_ref": "indicator--a957d810-c311-493b-b18f-0a074467c347", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2396c632-ad5a-42b1-8db5-7b54f998f75f", "sighting_of_ref": "indicator--658306ce-ae49-4aae-b48a-6a948358abfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abec6844-73f9-4e6f-858d-0b42ae6fc0ba", "sighting_of_ref": "indicator--3922cb92-1b68-42a1-bb3c-98db40655aa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a785058-87a9-41c8-ae71-58ab031493f5", "sighting_of_ref": "indicator--526862ef-cea2-4a20-b255-55ac11367c40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9a283e-6265-42f8-ac96-eb5633ed671e", "sighting_of_ref": "indicator--88fdcb9b-3b75-454e-9f41-39084b65ae9e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2682f61-8b7f-4eda-92b1-aee4893c17dc", "sighting_of_ref": "indicator--77276ea8-3738-47b7-8d22-4ca0505bf2d1", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1929e-3eb5-456f-8cbd-64aca167f496", "sighting_of_ref": "indicator--f2a49b9e-296b-4fcd-a307-b7e68d2e7b73", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7375265e-1ac5-4014-89d5-88ca4bb3e5fa", "sighting_of_ref": "indicator--9de92e29-5a52-4931-a6e1-e5d74373c246", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0a8e27-c051-4a1d-a4bd-5a17670c0522", "sighting_of_ref": "indicator--2ca483a9-25b7-4a07-b7d3-06900f94bcf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eb627e-3ac1-48d4-bc8c-b4e9605e4673", "sighting_of_ref": "indicator--ff68c900-d251-4383-a7f2-dbbf7a0d43a7", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d483d60a-0b6f-4b41-a054-5f6384305182", "sighting_of_ref": "indicator--8e2934d0-eed1-4751-a31e-8d7e45f8de4d", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b7f47d-c1c4-4076-9031-f84e802d2fa2", "sighting_of_ref": "indicator--b414baeb-d45c-4f86-bbfb-a6b408d6a7a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9cb4c6-8e14-431c-a8a5-33ec3e4f287c", "sighting_of_ref": "indicator--222c9612-ba69-4cc6-87f0-85dbe3f9de34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf1ffee-35ec-4507-b5bc-bf0a5673bca3", "sighting_of_ref": "indicator--7b078820-41bc-4829-b795-44ce16d2f828", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fe1d1c-5774-4419-9f8f-79702a585137", "sighting_of_ref": "indicator--efda8bbd-c24e-44c1-bdd9-78453383f419", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb88741a-844b-4fbb-a032-16eff6e5e816", "sighting_of_ref": "indicator--34b96ecb-fc96-4d03-bd2e-028713c4ba4c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cc2f4c-1e3e-4f80-b6e1-2868d154029d", "sighting_of_ref": "indicator--5069712a-d361-4f19-916b-7c1284d6ca9f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1d4da1-024d-451f-b29c-391aaa7421eb", "sighting_of_ref": "indicator--4fe51a6f-d8bf-40b9-897a-4a4122812ca0", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f82804-2449-4309-a223-f33590f3e993", "sighting_of_ref": "indicator--2cbfcdc9-856f-4056-a7b9-0b4ef7f9a0c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59b15e-01d6-43ce-b63c-aad692e06a96", "sighting_of_ref": "indicator--222371bc-8b15-4da3-b5b8-ac268a6c6713", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8078b381-da74-48d5-8630-c129b204524a", "sighting_of_ref": "indicator--687072ac-9f9f-405b-ac76-059826c17eb3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d39e5df-916e-47da-97bb-764cbde3ca82", "sighting_of_ref": "indicator--594fe362-b01d-41bb-8c76-15797cce571e", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412e5d93-5cc8-46d2-8016-3e3fcd5bb299", "sighting_of_ref": "indicator--594fe362-b01d-41bb-8c76-15797cce571e", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c150c1e7-121b-49ae-8e36-79c57c931c6a", "sighting_of_ref": "indicator--97bfd81d-4bca-4125-8d44-0b891c6747aa", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f433946-301d-49bb-8c81-58a9833be444", "sighting_of_ref": "indicator--1b0f73d8-d04a-49fa-954e-650c3d9db1f1", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733d1be4-0057-42d5-89da-eedb644d1b1e", "sighting_of_ref": "indicator--b3524e8f-560e-4d6e-8ad6-e7ed44fd0c4e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a14f3a5-5302-49a3-b52f-e0db6b572011", "sighting_of_ref": "indicator--e6e1e159-186f-4ad1-b9ed-fd06b2128386", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5925bd57-b6bf-425e-b007-a91eacc291fe", "sighting_of_ref": "indicator--21d40e25-9906-43f4-8c48-e94794b774ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c84f87-ac3e-4ada-8245-c1b952807426", "sighting_of_ref": "indicator--a9b5a568-9bba-4908-affd-eb6e4438d98b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375e373f-3c99-4b8b-a9d6-ee21da1e0f29", "sighting_of_ref": "indicator--0b4bfdc0-29ad-4139-90c4-f9b9af4ba3bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460bdae2-a424-4138-8cdb-7a58e34b6f5c", "sighting_of_ref": "indicator--022f6d5c-dbca-4eb0-9fbf-b8532dc7144c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb767080-22b0-435f-a52a-b8cfafa7784d", "sighting_of_ref": "indicator--dcfd8934-1a7f-4213-b4b2-a994dbebfc7f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a876d8a-2675-4afb-a4d3-e32897731a1d", "sighting_of_ref": "indicator--3ed4a52c-973f-42d6-81aa-fc5996d1a852", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab3b47-79c3-4f84-a143-af5b5cd83210", "sighting_of_ref": "indicator--4a82095a-a50c-449b-a38a-b7cf36043693", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99de2bf-6983-4325-8921-a5e5f2c0fb58", "sighting_of_ref": "indicator--a553f453-150f-48e6-b420-cda614cc2d87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c46eeff-c8f8-46b7-ad71-1a8139593743", "sighting_of_ref": "indicator--fddf5072-4f3a-49ec-baf5-890529a34195", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954029ed-ab72-4a03-ab55-28f9cfdd371a", "sighting_of_ref": "indicator--38f7d839-6ee2-4b50-8cf0-fcc5da676da9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789f80f9-7eee-4d8e-adcb-1f3a8fb7ece9", "sighting_of_ref": "indicator--a2e555d1-1ec6-4e67-b886-203a6b55065c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9045311f-e513-4c35-a6d9-edb82a415e40", "sighting_of_ref": "indicator--86ff7622-b74f-4214-b812-d25428b1b1c5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8872ea3e-1168-4ac1-9978-67f4b34f0db8", "sighting_of_ref": "indicator--de606e5b-041f-4c5d-a1b7-38b6d68267a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463c2183-fb61-4726-9ed6-d5a295d283a8", "sighting_of_ref": "indicator--4052561f-c623-41dc-a1a7-57e5eda41625", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3cb9ed-422e-4ced-abd5-eb812506bd58", "sighting_of_ref": "indicator--5e0c631a-486f-4679-9aab-c42b7edfb4db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bcd351-d8f2-4422-8c0f-500469fe22a9", "sighting_of_ref": "indicator--969279d6-b1f2-4dff-a8e2-5cffd17db387", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca71e7cb-ed72-46a0-817c-ec975a1c00c9", "sighting_of_ref": "indicator--688da1ca-19d8-4eaf-ac2b-2977e5f00726", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5671c833-6599-48dc-b592-d1b00f5faa10", "sighting_of_ref": "indicator--874a0a69-4701-41f7-88f6-28fa3bf94499", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09022e5f-0e08-474a-b69c-b29014f8f04a", "sighting_of_ref": "indicator--6c6504e0-9f31-4329-a6a4-f589c476a3da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4586db-f78c-469d-91b0-4f4ef86ccd31", "sighting_of_ref": "indicator--e5320e55-0bcb-4780-b47e-9ddac96dda49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267ea552-8c8a-4161-8fbb-539cf74fd978", "sighting_of_ref": "indicator--fc3ba974-8ff6-47c8-a0d0-24c7b990c733", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c1de2c-4676-456c-8524-75fc4bf00018", "sighting_of_ref": "indicator--b945bfc1-1146-4189-a893-8fa547c509d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639acac-6778-49ba-aa3c-0be395e3c155", "sighting_of_ref": "indicator--d916ff32-7235-4281-8fbf-9f2e49466309", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6e2be0-1ea0-416a-8fb8-83f03129cb96", "sighting_of_ref": "indicator--25b7851e-3fc5-4cfb-82d5-c577f5dcfe70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4c144d-5af0-4c76-b90c-482707786785", "sighting_of_ref": "indicator--a39784ad-d3ed-4685-8780-cca81654ccdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b6937c-84d8-4292-9373-9999fc19c7d3", "sighting_of_ref": "indicator--eddd9f06-38d2-47e1-a24d-028b8bc4a66b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe9620-947f-442d-a87c-8fd55237386c", "sighting_of_ref": "indicator--d46cfd65-0f61-4700-afc6-bff46e7afc1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bcee03-7176-45de-ba71-936094539520", "sighting_of_ref": "indicator--d159f733-40ea-48ef-93d2-8f8b21c2ef42", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62563e4c-7004-4185-bf29-e5eb9a7673b9", "sighting_of_ref": "indicator--f98eaaa0-6e60-4420-b183-4b0a059e93ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445e6eaa-6c9f-4d38-804d-fffc7e8e17ac", "sighting_of_ref": "indicator--9d93af4b-6e40-4cbd-8e2a-281faad1243e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07213597-9026-44a9-b19b-e2521dc04cf2", "sighting_of_ref": "indicator--30586fee-fbba-425c-848b-1cdc6aec980f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7e9403-44a3-413f-8c7f-5a3d650d4c42", "sighting_of_ref": "indicator--41203bbc-d1d9-4808-870e-8e513fe54037", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7108f707-ef90-4858-aa7a-81a254b4757b", "sighting_of_ref": "indicator--1bda075c-e79c-4f8f-87ae-afd737fc929f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00967cb5-e4a5-4c9a-9c25-f84a3e0b4581", "sighting_of_ref": "indicator--14cf6769-5693-400b-b058-18125f929705", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86493975-30bc-4194-b2bf-df01f5047573", "sighting_of_ref": "indicator--7497238c-ce75-4e6b-b5a0-ceac9ff639b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631f8c85-6ce5-4774-8a69-208ae2d95060", "sighting_of_ref": "indicator--9c1ab4b0-ed3a-4b45-89a8-25ed64235b6a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123c4d82-4efd-4b0c-878b-18f74ae50035", "sighting_of_ref": "indicator--c2da2400-03d5-4884-a2fd-57245be4c825", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1048df-d934-44b7-915d-66ce7f10da36", "sighting_of_ref": "indicator--f663caee-c1e4-4939-94e5-2de443fc2363", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db885d-0777-4ce1-b916-ba1cb5b9a3d1", "sighting_of_ref": "indicator--bed3603e-dda3-4992-970a-2206ef905a2e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f967eeb-f8d0-440c-9d4c-352c7ea33649", "sighting_of_ref": "indicator--37bf9fcd-ba21-4b6f-8296-41876347d5fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1133ef0-e989-4e21-b6a2-5a6ffd221824", "sighting_of_ref": "indicator--044b335d-934a-40ad-83d7-4113ee2c5b73", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07466743-c459-4044-a2cb-7ccf3413e1b3", "sighting_of_ref": "indicator--168ed01c-f585-4b0d-89f2-e6287be3bfc0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ec1ba5-171d-43a2-a196-995f31864682", "sighting_of_ref": "indicator--8cf87648-134f-4c7f-9b2d-f3a4eba70dda", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19fced0-f57b-40d2-972c-d3d17fa77ca0", "sighting_of_ref": "indicator--746c2c0a-a0e7-42c7-9dde-96714f7ef2e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee0d32-d227-421b-8b8c-38a2d6ce64a3", "sighting_of_ref": "indicator--7ed1b636-d068-483d-af43-f378e66e7e56", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8ee0e8-a66c-4ad7-afe9-ade892fb3178", "sighting_of_ref": "indicator--36afcc2d-1aa3-49fc-a72e-c8b6772a6f6a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857178b2-c1ba-4137-9848-2131cecdac26", "sighting_of_ref": "indicator--96445bd1-8e87-41af-af26-eb0315b3fc91", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0ae747-04e7-490b-a4d3-c3732943537d", "sighting_of_ref": "indicator--d93f6daf-f881-41ce-930a-6196b34cca22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27791d97-58f3-4fae-be52-634071388705", "sighting_of_ref": "indicator--3688c592-36ab-4568-99af-4a0ab94df4fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bdf8df-452d-4e91-b0b7-42b1517b1d44", "sighting_of_ref": "indicator--9c25773f-45f4-4d61-8584-3a7dca84a5f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f1f94a-a888-4d9e-a63e-6c968ef9768b", "sighting_of_ref": "indicator--a24cec69-a8a3-47e0-a0c2-219823776a08", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ac3768-4613-46fb-9bdb-06cafdc24f02", "sighting_of_ref": "indicator--ccf142a8-597e-4375-beeb-b4a23c3ec91f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d0c8ca-15b1-4db0-80f3-a29e3f9eda3f", "sighting_of_ref": "indicator--86a25ebe-8593-4a54-bb9b-077762c6596d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384c94ff-13f1-40b0-8901-67a0baa24886", "sighting_of_ref": "indicator--3d578ee7-08ad-4cec-864f-3480c0497397", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9fc7c0-04f2-4550-9b43-90df25b6099a", "sighting_of_ref": "indicator--918220a6-6a75-4c4c-9201-c813d87baf03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cc43a6-fd69-4e38-83c8-92da1adf5f19", "sighting_of_ref": "indicator--4f5fe976-d7b3-4d8f-bf70-8cfd2178122f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494bbb3f-009f-4dd0-9b11-d43b85a58a4d", "sighting_of_ref": "indicator--7974d483-1703-4975-b041-69104ee800b0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db49bc28-31a6-4b71-9431-738ffce77e77", "sighting_of_ref": "indicator--ded1e511-fa98-4d82-b8eb-84a8d147ba95", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5441e1-1a2a-460c-84bf-c6c08dc28c12", "sighting_of_ref": "indicator--3021f545-7eec-46ed-bc1b-9eec7b288791", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ef54c-16e6-4111-b899-27b6b2ec7b0e", "sighting_of_ref": "indicator--acf2c203-9ff9-41d6-b618-ca468ed12b24", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3833ebd7-12df-468c-816d-1004ab7fa8a7", "sighting_of_ref": "indicator--1dca625d-f96b-41b1-a4c1-57094f92d48b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253bdcec-560b-4eeb-adbe-fa493cb8b6ec", "sighting_of_ref": "indicator--15241e75-afd9-4755-88d4-05e56ff327f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09193da-bac0-4253-81dd-bf4b4be63df6", "sighting_of_ref": "indicator--8ee5e682-a2bb-48d5-bed1-f8b0a7ab0293", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19221a5f-85e9-4a25-8d68-f4384193ae3c", "sighting_of_ref": "indicator--cb10f872-3135-4539-a628-c8549d0da51a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e1179a-1c25-47a1-823a-b540643d51cd", "sighting_of_ref": "indicator--4385f77b-afba-441b-9317-4ee14b0a6370", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b0b81e-56dc-403c-994f-c5746537ffe9", "sighting_of_ref": "indicator--52ab1e40-dcf2-4c39-874d-b379fe6ed302", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322344ce-5ed3-4a57-9db5-46586cd4f540", "sighting_of_ref": "indicator--184315f2-dc66-4e38-abed-b992668dc460", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0360b97-934c-4592-9da2-da9ac8c64451", "sighting_of_ref": "indicator--092a100d-4bb5-4b35-9f3c-19ca08a860e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180f00c1-43d9-4955-96fe-9f612a246260", "sighting_of_ref": "indicator--b695f064-b73a-493b-bb42-3945825f989e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ebbea5-77dd-4eef-876b-2e3030dd4a19", "sighting_of_ref": "indicator--bb3cf70f-2e27-4900-8d01-69ca10cf14a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07fd8ab-c7d9-47e9-b0ed-e965959d913f", "sighting_of_ref": "indicator--136945d5-8516-48a5-a490-6aabc253f164", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0c1611-6875-4ca0-a5b3-ee26b7996f72", "sighting_of_ref": "indicator--93c7e366-efd7-49fe-8330-b3502373833a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57422a5c-e12c-4c8e-b5a6-6d8bd158bcbd", "sighting_of_ref": "indicator--03122b8f-3bab-4b63-9d10-6f3e0e4ec98a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853ce30d-fa94-4bc8-b668-903d81b3205c", "sighting_of_ref": "indicator--41b852b9-7d6f-4abe-8e40-0748df219de5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420f4bbc-9eee-4c0a-b181-3cc5418efa55", "sighting_of_ref": "indicator--63d75991-80f4-4c35-b83d-3ee6c05bed44", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a146e8-2fe6-457d-a3fc-2ee56bb54268", "sighting_of_ref": "indicator--0684d2b8-e081-429a-9a20-aabbde156b6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9817dc6c-244d-4346-b4b6-24fba86e16b5", "sighting_of_ref": "indicator--9b45b15d-1e42-4b9e-8c0a-59fde64df8d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c18a8f-0d8c-4365-83e3-039f6cd89edd", "sighting_of_ref": "indicator--2e00f87c-be95-4317-8a9d-46e4a056e9b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9748372-67e1-40b5-a4a5-6591b913750a", "sighting_of_ref": "indicator--04a30455-0bc4-4e62-bfd2-5084852c80a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81674790-0fc3-49bd-bf08-4d8adf579bd8", "sighting_of_ref": "indicator--603f1393-0799-4cb8-9d71-0b53f62ce99a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459d5b1a-9dad-48c4-984e-cd9a9db302a9", "sighting_of_ref": "indicator--d89c92c4-ec93-4834-97cd-e46424020392", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39717bd-34ad-4691-90eb-e9cdc02eebcd", "sighting_of_ref": "indicator--c55d0a4e-8256-4645-96b2-6b7cf050c5d3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb00b71-7e87-4b66-9dbc-83fc82444ee1", "sighting_of_ref": "indicator--1f8d094c-d089-4428-820d-8a9a9261fb6e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64723b01-118a-40bf-8d0a-4ee237ff10d2", "sighting_of_ref": "indicator--3f7884e2-3c36-4f19-9fff-a4105bb48835", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29630f1-4551-4612-8e3f-573d5839f4a7", "sighting_of_ref": "indicator--97aa5b01-a92b-44f0-9a4a-2f373270e39c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c545be6e-c98a-4a68-b3f3-d8338dc420c4", "sighting_of_ref": "indicator--8535f42a-9983-492f-87ab-5833899e1b07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aa3fb0-b502-47ba-9669-a66ab31d8163", "sighting_of_ref": "indicator--27fd45c0-bab0-467c-b5c3-a1d461801a4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e6f3a0-b3e4-4a33-b1f1-ea4a8675dbd4", "sighting_of_ref": "indicator--e446f7d3-b5cd-46b6-82d2-69ae387fffa9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b75255d-49d3-4d61-aab9-6e863cb29394", "sighting_of_ref": "indicator--a75ea530-2b05-4911-85e4-35a6c08345f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88a4f6a-110e-4e2a-af96-ccf6a16a75e2", "sighting_of_ref": "indicator--77a512ff-4b00-4ba5-b11c-9542ef5a168a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbe2795-9806-42eb-be75-371c5dffc898", "sighting_of_ref": "indicator--0cef1dc6-1feb-474c-be47-2774f6cdc29e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f227c8-d06c-4b51-8c7a-0311c234ed77", "sighting_of_ref": "indicator--0a44ae6a-ad53-4e2d-afc3-f3351690b7fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3b3d89-7699-4ce9-8d05-048d8b260f5f", "sighting_of_ref": "indicator--ff260135-20d0-4594-b370-14747baea709", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1661bce4-ccd5-445c-acf6-7c14a960ed8e", "sighting_of_ref": "indicator--8270a36e-521d-468b-b720-8f4d068c7f56", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749a5eea-203c-4674-b9c4-c8b002838c1e", "sighting_of_ref": "indicator--7d76b070-9c9f-42dd-9a29-4ab21ef68870", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51763223-da59-4ad2-8e9c-6ddbbe4357bd", "sighting_of_ref": "indicator--50044d0d-231b-4ee3-b10b-adee52338c74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054ad478-6508-4823-9718-d7f400875ceb", "sighting_of_ref": "indicator--6e96be21-e250-402b-9561-9315037bac78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6602920d-303a-4456-b952-8bbffb9a730e", "sighting_of_ref": "indicator--7b0b3020-4433-4818-a342-234e8763163b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7fa084-a34c-491b-a6a4-957fb05221c2", "sighting_of_ref": "indicator--1c98875e-1b0f-4c63-a8e5-9da119991fd9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3ad31f-7353-46fe-9f10-f740d2f22199", "sighting_of_ref": "indicator--96433b8c-1b23-4c55-bd50-cd139314eeae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7431063-5a52-450d-b7ce-3eb7c9ae147a", "sighting_of_ref": "indicator--77f39165-0c2b-4c68-b2e3-bcebac25dba2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927a7bdd-c12a-4cf9-8fa0-d134c6b7f9f2", "sighting_of_ref": "indicator--c2941759-ea99-47df-bc62-8d8415aa4df6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b7726d-373b-438b-8f40-dbe01846f91e", "sighting_of_ref": "indicator--90eff847-ad21-4741-a504-5c01750f0aed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7676a99-e28e-423d-90e0-47c8c018a12e", "sighting_of_ref": "indicator--aa2c85d8-722d-4e40-a296-323428022a40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6ca390-222a-4d85-a735-902f64a211c2", "sighting_of_ref": "indicator--44fd8674-9101-464d-abea-d5172e3b295c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed6286a-f3da-4853-a1fd-088c6ec14454", "sighting_of_ref": "indicator--a0d967c5-4b37-47aa-86db-fcfd0b6311ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38aebfe4-6a08-4c52-bdd2-d9bb81414da7", "sighting_of_ref": "indicator--55804ef4-a6b6-42ed-8c30-19f67451ec4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0effcd-a1e4-4c9f-a1cb-9153733666bd", "sighting_of_ref": "indicator--dff1782c-e6c0-453e-9959-bdc2c4040578", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68457844-5218-48cb-bab9-d2e94874f67d", "sighting_of_ref": "indicator--9826db27-1e78-4f01-aea8-efc59b09e6ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87e016c-e3ce-403a-af26-13acc285181d", "sighting_of_ref": "indicator--8b683a39-f5de-4e91-875e-e6980c0f9c0e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35d46f4-b519-4c2b-be21-32a69530345e", "sighting_of_ref": "indicator--941d9bc7-36ac-4e68-97a4-f0cf7d7b2cb7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8318cb-607d-4296-bb54-ea4332149276", "sighting_of_ref": "indicator--7c9ec8c1-9793-460e-9f72-9ebac230ec89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7eba28-e53c-43f7-95cb-a31497221a16", "sighting_of_ref": "indicator--bcce9f23-5105-4c6d-8d66-01fef2564267", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a9c5cf-04cd-4842-924d-862d63040a5a", "sighting_of_ref": "indicator--81dcbde9-0cf6-49cc-9565-ba0d11a73dd0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a1c68c-ee5b-4b4e-a738-a1212ab019b5", "sighting_of_ref": "indicator--16b68579-052f-49f2-a8b3-d2cbbc344d81", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de69548-9e8a-4d35-b482-88cdbddc62b0", "sighting_of_ref": "indicator--2ebdc8e4-9f40-444d-bbe3-81bdb7e1429b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accd3b10-dc6f-4780-83d1-72f6b6a415c5", "sighting_of_ref": "indicator--9c9480fa-c96b-44c9-a742-506f3f77ef4e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71327c17-0c15-4f81-a0dc-0ce51c398099", "sighting_of_ref": "indicator--609b893a-5669-437a-935b-67dc27cccee2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a3f9c6-22a1-4ea7-8af5-e244623a0fcb", "sighting_of_ref": "indicator--67ba3de3-7d58-49f7-8fdf-518f69b4814e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7921748e-6366-4634-86b4-eca557904bad", "sighting_of_ref": "indicator--9c0f68ed-e205-4c51-b4c8-41f7c0bcc4a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf6d97-911b-486a-affc-3ad68336c30d", "sighting_of_ref": "indicator--655f026d-fde1-408b-9aeb-feea60ef11d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34f09f4-ecb1-4801-b52f-10affe66565a", "sighting_of_ref": "indicator--15ec00bd-fdca-48f3-a057-b7e4ccea4150", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee7bff1-c3f0-46ff-86ba-b27588ca71e9", "sighting_of_ref": "indicator--be097672-8718-47ca-8c8a-194ff3652291", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60867708-2e57-4977-a5c1-439fed6bdb19", "sighting_of_ref": "indicator--21ae9120-58f3-4155-8ac2-f64cea36427f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb19dc-d102-4981-9b47-f4c2096d9e09", "sighting_of_ref": "indicator--9225e41e-b3cb-4f2c-a5c1-b611b4542e3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8165a7b1-0384-426b-b8d7-2d1d1d7475aa", "sighting_of_ref": "indicator--21fbd1a5-1402-4c15-87d9-376708fdaf83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8731d17-ba1d-452a-ac4a-d430f12bb6bc", "sighting_of_ref": "indicator--539d1377-19a9-4d62-a8d5-8d9f4e373416", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4788c37-85f5-4e63-a356-ad6797af3a7d", "sighting_of_ref": "indicator--7ad84fb0-37d4-4dfa-a5ca-86f802b97c2b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684aa5b5-5ac0-47b6-a960-f88c6f041653", "sighting_of_ref": "indicator--955a810c-2736-47d9-90b5-98e6798dcfdc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf352c45-d172-432a-8301-41f89ca8e6e1", "sighting_of_ref": "indicator--cb7fa2e5-b287-41a6-8fb1-41d8c0e4a660", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a0fc85-1be3-4c83-9984-559f77bf7b65", "sighting_of_ref": "indicator--379fccd8-d602-4a71-ac57-83a995dc4dad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24ddfd9-479e-404d-b188-9282cc4b529b", "sighting_of_ref": "indicator--765b6175-7dc5-4ea0-b7b7-6cff57e136a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37520cea-2aa1-4163-9322-adea7f3e394a", "sighting_of_ref": "indicator--8bb8ff54-8fda-4e55-b84a-6fe0e6930aa8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79fa740-89b5-48d4-8003-88af34bff2b4", "sighting_of_ref": "indicator--4bd2e16e-09ec-49e2-849d-5d1c3d6a775f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7ff348-4eae-4fab-8bca-cdb3dfcfe9b0", "sighting_of_ref": "indicator--c105b12a-3ad1-4a8d-8868-4c4c8af16355", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efe71cb-49fb-4b38-ac7f-b45dae057c21", "sighting_of_ref": "indicator--85f0a8ca-a0c4-4a55-96ab-a6cb997e611a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874cfb47-2a54-4d2e-96cc-3f38666d806e", "sighting_of_ref": "indicator--20df3403-148d-4b27-84e6-ebb4f31b8612", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22d1e19-578a-4f96-8459-8ef3d8038c00", "sighting_of_ref": "indicator--8e298860-edc5-47e5-9a95-b85dd49ed828", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37318c1b-a44b-4260-897f-2be3242a02c3", "sighting_of_ref": "indicator--c31a24e1-ef6f-4caa-ba6c-1a4136fb45ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae6980-494e-4a87-800e-4fd5785eab23", "sighting_of_ref": "indicator--2baf0617-2e75-4244-ab9d-459839c2ac89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ebdfb5-835c-423d-a6c9-ec632d081ac8", "sighting_of_ref": "indicator--470496dd-1a36-4981-995b-b211a2543b6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e170d37-9f9c-4509-a13b-e910a8e5ec94", "sighting_of_ref": "indicator--c207c590-283a-4418-a5fc-ded77a12eda2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c248b3c6-c6f0-40f8-9741-cb22fa7dae36", "sighting_of_ref": "indicator--6c4e4fc7-b6d4-4da3-b07e-c504850ffba2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8979064f-b111-43f6-a981-a3652e7f44df", "sighting_of_ref": "indicator--74869464-9196-4a4f-8387-0d5abac090e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6390d7-f0ab-4e58-a016-540086a9665e", "sighting_of_ref": "indicator--ac0f9fd2-6e89-4edd-92d0-a94d1eb7ccd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed64db3b-e90e-44be-8b87-d524472cbe29", "sighting_of_ref": "indicator--9811a596-ac17-46ca-a834-45193f755ef7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a6aa7-b81b-49c4-86b9-01cbd6b27e26", "sighting_of_ref": "indicator--329317c5-2c29-4b02-8e67-0fdff2af8459", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597c36d3-d1dc-4de7-8a5e-0c65074d93a5", "sighting_of_ref": "indicator--f5f3ea99-c100-4a09-88ff-a3bf423dc86b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c0b10c-c15b-4613-80bc-0642dc8492a9", "sighting_of_ref": "indicator--2c93d8ff-0abc-4946-b83f-a17c9152f876", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b489e48-ae9d-4908-8324-c6e5624d7241", "sighting_of_ref": "indicator--bbc9ddab-514e-4ccb-af50-d58283230e6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40893207-c425-472b-bfe2-9c1c9505b622", "sighting_of_ref": "indicator--4e751c23-76ca-427e-bd6b-4e06400a6165", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca630e0-ac55-4c4a-b27d-41e73fa3372a", "sighting_of_ref": "indicator--4842a30d-9168-4faa-aa2c-2719b717c498", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bae5b9-ca86-4b87-a049-9be6bafa5864", "sighting_of_ref": "indicator--08f8c992-f890-4a7a-ac05-1e9039c84583", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64f873c-4941-461b-a57c-4a29b3a74e66", "sighting_of_ref": "indicator--edd22e12-8aa0-48eb-8189-5c0504a644b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8078fe1f-c547-4866-97a0-6f6bbcf2f4b3", "sighting_of_ref": "indicator--98b9e158-8c7d-4be3-8dac-8a2644e1cf05", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8a836e-f38b-4a92-a085-76b487184dfa", "sighting_of_ref": "indicator--3bd88461-d89d-40ca-884a-9e6b3da08038", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc2aa8e-aa89-41db-98cf-2e54a79aaa8e", "sighting_of_ref": "indicator--e6654c77-b982-401e-b8bb-8f2b3c20ffc8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8f7975-09cc-4a9a-a64a-1e766a6ba2fe", "sighting_of_ref": "indicator--1b04c85d-d8ea-42e2-841b-3fa6e3f39ab1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8b554d-abae-426d-90d6-f616cf6d8e7b", "sighting_of_ref": "indicator--44757802-23a2-4848-8623-0250801fb061", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d83644e-28d8-4f9b-8170-d8f05850f674", "sighting_of_ref": "indicator--0f8143dc-4010-4be6-a93c-8fd80ab2c407", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d28654-a455-4b7a-b991-0898402ba0a9", "sighting_of_ref": "indicator--043531d3-79e1-41a6-b8ee-93139ff80c45", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56008e8-254e-4632-a2be-c434e17eb139", "sighting_of_ref": "indicator--cbead0b9-0b6f-47e4-9c2b-a78b2d5a0a57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6394ba18-2bba-434c-956b-0b12725a563d", "sighting_of_ref": "indicator--2e722aab-9fa9-4656-bdf1-d5ed9be4963e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39534a40-b5fe-4495-a69a-fe6efa12f7a3", "sighting_of_ref": "indicator--d5a1025c-8c0f-4907-87e8-2bb8d1f58783", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a92825-3a19-40c8-ba68-0c8c89921073", "sighting_of_ref": "indicator--b40e58ca-5259-49b4-b338-c6156b31b39e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ef2a0b-a6aa-4498-8390-accedee3f26c", "sighting_of_ref": "indicator--01979dde-3493-4b8a-9c77-adf96d722b54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3e75e-51b0-420f-abf0-3b631902df40", "sighting_of_ref": "indicator--f07324eb-cdbc-49e7-9f34-5f9bae132844", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04386ff8-ab0f-4edd-8427-f2ac15fa4ef5", "sighting_of_ref": "indicator--7acc8e9b-6dbb-4d7d-8e5b-48c4b57f6f35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e4c9f-64d6-4173-bc85-f44507bb71d9", "sighting_of_ref": "indicator--ad4668ab-ae4c-47c0-8cb2-de4c0d469742", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159cb308-18d0-4d08-9a8e-448fb3a59052", "sighting_of_ref": "indicator--483dd0c2-1eff-4a67-b0f1-8f2bb61c2001", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f96e1a-4fc6-42c1-be78-8a629df8f32b", "sighting_of_ref": "indicator--50b0dc71-88a5-4a48-876b-54704ca3d6be", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35cf9a4-676d-4107-8900-a0a56dccfdad", "sighting_of_ref": "indicator--38f9668d-d647-4633-bd28-cf02813eec7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3a3ee6-df06-4352-9bbd-8b6f9ac4c2e2", "sighting_of_ref": "indicator--34f996c1-d1b2-4711-bb97-7ec9e41d6d82", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd1240f-f1e5-440d-bb33-f72861585196", "sighting_of_ref": "indicator--fc9a805b-696b-49a1-a293-6381382a32fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9772d0fc-f029-4070-8b44-04837fd3da9d", "sighting_of_ref": "indicator--edb325cc-af29-4914-8ac6-8e76eaa2c8f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc550791-74de-40a0-ba5b-a3a346a3899e", "sighting_of_ref": "indicator--9081c2be-97ce-42cc-ba31-a09b1e3734d4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142edbf7-57f9-402c-96d1-1c041466ec10", "sighting_of_ref": "indicator--c20c4d00-300d-47e4-bf5b-777020d9c4bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc308e91-ad97-4abf-9552-6f4d2be4f24b", "sighting_of_ref": "indicator--14afb0e3-801c-482d-bbbc-a9e4a115b0b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba40d6a8-839e-44ff-a700-48277d4863a9", "sighting_of_ref": "indicator--11ad3a13-d3cd-4d0f-b1cc-e6b74351b671", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21981f1a-5106-4084-893c-36b820ea80fc", "sighting_of_ref": "indicator--3aa23513-225d-4e74-96bf-bd714e1d225c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05996dc9-4780-4cd4-aef3-9cf303ee9e45", "sighting_of_ref": "indicator--3397e7b3-6b7b-4bc2-a3cf-69005db68028", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8ad2bf-a644-422c-8292-8f76a179d210", "sighting_of_ref": "indicator--8b276bb5-b7cf-47b7-a7e7-eec29b1b8200", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518a68f-344a-41a9-bd1e-b7123ea9de09", "sighting_of_ref": "indicator--43809daa-f1f4-45a5-8e1d-855e6f29c09d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4f7502-26bb-448d-851b-dcb607823751", "sighting_of_ref": "indicator--882e624c-0aba-4708-9987-6664690d1fd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763f8a6-da2a-4790-9469-0bc66dae578f", "sighting_of_ref": "indicator--51b612ec-2df3-4462-b6ff-832db992164b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d496b878-a8fb-44dd-bfff-20c427fd31a3", "sighting_of_ref": "indicator--3d6b3e82-92fb-4c7c-8306-6c9c9662dfd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e315fc69-cbd3-4e4b-a48a-9d5e1fdb61a4", "sighting_of_ref": "indicator--e4eb8c3c-0d2a-49bb-af43-f124606ebd09", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d100f1c-35f8-4635-8e7e-0c22cf645173", "sighting_of_ref": "indicator--790eed66-dab0-4232-a70e-165fe6a9d662", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f726b3-5f2e-4821-b197-92bc8b0b8568", "sighting_of_ref": "indicator--32043466-4b14-4321-b640-d499d9dc78bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174fb4e3-4c9d-49ab-ab47-694612f5d8bb", "sighting_of_ref": "indicator--d5dea16d-508d-48ac-a535-2d2b1a72c53f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef3db0f-850a-458c-b6ac-38bbedfe4af8", "sighting_of_ref": "indicator--de519097-20b0-430a-b1a0-ec29423b82b8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f277fc2-1b70-44e2-9032-29f0f10df750", "sighting_of_ref": "indicator--8488d470-b0f3-4a99-8126-4298a751a9c2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db1deab-aba4-4a9c-b4aa-9c323acafbe4", "sighting_of_ref": "indicator--a1096b72-8c12-4296-b2c2-8015e183271c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e294cb-d768-42f5-b81c-64b4f1913694", "sighting_of_ref": "indicator--dc599d4a-56e1-4b0c-9f8f-c6a19e487130", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7cf9f7-658d-4724-a398-b2992bc2bef4", "sighting_of_ref": "indicator--7ef03e1e-d702-427c-8d6f-35d83f7b90ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763038e-f697-4fd9-ac62-c5fd1d1f5a53", "sighting_of_ref": "indicator--c2f0889d-0e07-458e-afc7-827f6c61ed6e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc69761-a1e8-4300-9597-8493814363a0", "sighting_of_ref": "indicator--530fc138-dc03-4ab7-870f-433caee91e3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf985c5f-7105-4330-ac05-23683214b22a", "sighting_of_ref": "indicator--d5697913-6d0a-433f-b4e9-4dbee1a23805", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132a7a2b-e418-4331-81b3-132fcd867239", "sighting_of_ref": "indicator--4c86a259-9bf7-4520-ac50-5a1e3e662015", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d04e28-7c6b-4208-bf97-25413b5d666f", "sighting_of_ref": "indicator--cbd78330-6bac-40e3-8119-7c5209cd926d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926e43da-1359-4bac-98a5-a98f3b1ea479", "sighting_of_ref": "indicator--f459e06b-c21f-4fa0-8808-5ceee4b28743", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a045c57-c61e-4983-97fe-65752f2749c2", "sighting_of_ref": "indicator--77869185-84e5-4ab5-a14f-481983fe593f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0591401-23da-425a-8657-1010a69cff07", "sighting_of_ref": "indicator--104b131b-27ba-44b4-a96e-aefb1bc82047", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e414f42-6fb1-463e-a3f9-f520c5d776b1", "sighting_of_ref": "indicator--d73bdc6c-c9f2-4563-bc3b-8a5ba7e4e3fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a231bc5e-a7d6-4276-9136-23431384fc97", "sighting_of_ref": "indicator--1608709c-0ad0-43b7-b0d9-04f16c7b42e2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2285127a-c213-4b47-b8ab-2d617c27b58a", "sighting_of_ref": "indicator--b73a8cbc-7360-4c6f-8c05-f8fd231b8e4d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b09d9e-9a98-45f0-ad0e-35c42abe790c", "sighting_of_ref": "indicator--0a8ceb75-6d39-4cb0-9614-3ab13d7dd68e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd511c2-d75d-441a-a581-b8025e423567", "sighting_of_ref": "indicator--32a917b8-0b27-4657-a19b-0ef5b6a14732", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a06aac-b45c-46eb-a2f2-79402be7fdf0", "sighting_of_ref": "indicator--fd89533e-aa5d-49b8-857e-8bec3f4e2e67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f6b675-4aec-4947-86b2-88023f44dc8e", "sighting_of_ref": "indicator--0e23c62a-036c-4e6b-b906-e819191f8e40", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3f6f40-7e8d-4b12-931b-40ab1acd8c8c", "sighting_of_ref": "indicator--cc90140c-8dc8-4f18-92b1-d538dee026ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8884d49-e883-4ec5-bc9e-d6cc2ca9ea45", "sighting_of_ref": "indicator--4e4e7c82-3ccd-4b04-a18a-fb424f15155a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d016c586-0b2e-4fe2-840e-b8b7331a7a98", "sighting_of_ref": "indicator--644b6dff-7a6c-4a32-adf4-42c94ae147b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b083c21-e6f3-4e3e-bdde-462b759d5f47", "sighting_of_ref": "indicator--bd7c86a9-90bc-4e70-b4b4-d831954a7748", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7979a393-26af-44c0-b1bf-4e737eb4f8d0", "sighting_of_ref": "indicator--443ff408-4959-433d-bcba-4494edcf5a31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45646792-7467-4f6e-a6e8-44aef2be7819", "sighting_of_ref": "indicator--6469b8eb-7a1d-4304-99f7-1c1f83fd5d3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d08b2b1-4ab4-4c65-aa6b-217af47eb03f", "sighting_of_ref": "indicator--76c43d11-5d58-4423-b069-9e363f8dff41", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa4f5c9-84dc-4403-a2b4-1da36400d796", "sighting_of_ref": "indicator--b251c83f-74a4-49f1-92d3-e7aa834da030", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6a1966-5fc3-4fdd-9d62-cad139faf047", "sighting_of_ref": "indicator--7a913dc5-873f-4a44-9e6b-a834101402ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df92a864-7bfb-43e6-aead-8a3c8bb1ee07", "sighting_of_ref": "indicator--18e7d8e0-eba9-47b8-91df-79646cd1cf34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089c71cc-f05d-49b3-bbee-45be6a10a16b", "sighting_of_ref": "indicator--53c85479-f3d3-406b-b646-6d5ebfc57ed7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6253df-1b7d-49cd-9b92-61a060b9364a", "sighting_of_ref": "indicator--b37d3b7c-60d4-4795-9eb1-2d841f4a59a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3e01b0-9762-4b1f-8e21-94b3899163da", "sighting_of_ref": "indicator--c2dfd294-9fa1-42fc-b5b4-819d82fdd493", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4f41cd-ecc6-4f78-af0d-4e31ec7c4972", "sighting_of_ref": "indicator--c6aae0d7-3838-4fa5-bf06-f4b9608f2860", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f5a52-4fc0-4f53-ae20-36df691a96d6", "sighting_of_ref": "indicator--09e98bfe-e2d6-49fb-9f0e-d1677da76289", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8034d8ac-4e99-4ec9-b37d-a9ebbee55f42", "sighting_of_ref": "indicator--69ee47d5-a36c-4aee-be00-4439c9c438f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b14d4-880e-4e04-a589-0ffca440c8b6", "sighting_of_ref": "indicator--01628d01-729f-4a9e-a7ce-762b98e0ded9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facff756-f331-42d9-a9d1-22bb6d48be79", "sighting_of_ref": "indicator--16ff2e8c-b9a2-4c3f-95eb-964b45f2e539", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f044784-7de9-410f-8021-3dfbf2c23dad", "sighting_of_ref": "indicator--9602f850-ca70-42d4-9eef-a14bee93f535", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41bdbe5-e71d-4206-a2c8-d6ee6b557802", "sighting_of_ref": "indicator--7887112a-21ab-4281-8b33-7db1be879dfc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bbd92e-c8c4-4bdc-8a2b-0f853b43d1b5", "sighting_of_ref": "indicator--75c985cf-19ab-4d8f-a59b-a0189928deaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ec5743-db85-4c2b-9a7f-3f6d5d9dfd4f", "sighting_of_ref": "indicator--7484d230-c40a-4ec0-a973-f8a0d106afad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5a2339-bc53-4d87-9486-113400e5a2fd", "sighting_of_ref": "indicator--cc90095c-2a71-46b1-94a4-e5a3fdf3d128", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33956a54-18c6-4331-81bb-890233a390a9", "sighting_of_ref": "indicator--7d4a9e6d-76f0-42ab-8fa7-e64458d2bcaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8938d126-a1a6-499c-925d-e6a5e0767759", "sighting_of_ref": "indicator--60e03b95-c237-43c3-9961-f5551e4cef79", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c499271-3731-43ff-a5bb-298cc3b15e7a", "sighting_of_ref": "indicator--5eb04af7-c569-4e9f-842f-cd4a64f03abe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad06b6e-5b0c-408c-a5ed-e319d4de5a1f", "sighting_of_ref": "indicator--57bad440-7045-48a3-9b45-f2ff20e6f5cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d395492f-adac-482e-9b24-8043805e9d3e", "sighting_of_ref": "indicator--077cd52d-bd5c-4e49-ba26-7465ff226c18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc993078-4d3c-463e-a69d-6dc244ae11c2", "sighting_of_ref": "indicator--28e9db91-e0f9-417e-94f4-c2b2a4181b90", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a5793d-0e4e-4cf3-9c3d-3c8d71aa2eeb", "sighting_of_ref": "indicator--257c3681-1662-4a9f-96c4-a8a93554e059", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa498f-76e3-4f4a-94ed-e3634cc16b03", "sighting_of_ref": "indicator--b6c0a96d-3d38-4de1-8ac3-b627f185b8d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9393e76d-775e-4856-a4bb-5143602195b7", "sighting_of_ref": "indicator--2e411187-01c1-4ea0-8723-995f0f9008d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b785c082-f114-46bd-8935-b0de9ae5d497", "sighting_of_ref": "indicator--7f8967e1-6df9-49ce-b1e5-501030419333", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1a267-d56f-470a-b66c-d197416c4561", "sighting_of_ref": "indicator--44995900-e1c7-4ecf-9ec6-70eef0f6503f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4fead8-3ebf-4f93-a66b-838239f6777e", "sighting_of_ref": "indicator--54dad13a-2612-4029-9a82-6cbbc4888625", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998cb95-83c5-4fda-b619-a53c77c2ea94", "sighting_of_ref": "indicator--8fae7b6d-9412-4a4f-bf06-9a6f4dc254a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43043461-f3e8-4260-9ce7-8c1f75e597c8", "sighting_of_ref": "indicator--1fd7261a-71f7-4035-a861-537f9967d7d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fed8957-3afc-4af5-976b-08397816e607", "sighting_of_ref": "indicator--1dca0cbd-fd07-4909-8c00-fa7a5cdb3e03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3675b041-c009-4348-a9c3-145dcfb8def6", "sighting_of_ref": "indicator--2b5c07ea-6a3d-4c0d-bd6d-6a43a91bcf07", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696941d0-b86a-4f29-a595-ecf1e6913667", "sighting_of_ref": "indicator--2d45908a-870f-4b13-8142-2c1c771bebba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19451d7a-778d-4730-8d80-884c866a9aad", "sighting_of_ref": "indicator--34e6973a-3f17-431f-bf0e-59d804ee1ca1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a37067-4f55-4473-9001-c62733d864c1", "sighting_of_ref": "indicator--93c6d913-86e4-4503-a89c-c0d3b5306330", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971a1906-360e-4e95-bd1a-363f573ecbd4", "sighting_of_ref": "indicator--cc276e84-6af9-4669-b268-597dac3f9921", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b12fc06-21a3-4ad5-ac3e-6f1b6150ab17", "sighting_of_ref": "indicator--4263a871-26c7-44a5-a961-4b1cc762292a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb76fbd-2692-43c4-86f6-45905eccc9fb", "sighting_of_ref": "indicator--4fd3c1a6-638c-4c0a-89b7-7dbc7fd2d2a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c6b2d2-6b49-402b-8061-dfd66eba384e", "sighting_of_ref": "indicator--27ea5440-d06c-49a9-bc5b-f7f2fa214179", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3ee812-a2d0-4fe6-bcc2-85de3daee500", "sighting_of_ref": "indicator--5f913c45-43f4-444e-8c07-708f7f0ecc2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689fd6ca-0eb8-4b43-aff8-bf3f5cffa791", "sighting_of_ref": "indicator--81ab1e10-858f-4320-a749-2431adb3a412", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66bc3f0-f8c0-4370-9bf0-205eb73ca5ec", "sighting_of_ref": "indicator--43cfc563-896c-42f1-896d-a91e47b7333f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589af185-e3a5-4fc0-8aba-5ec4c3858d5e", "sighting_of_ref": "indicator--8b0f76e8-b607-4e2e-9c61-d675cb885390", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d874d855-78c8-4930-b57f-dc861d3a4a84", "sighting_of_ref": "indicator--ad16ce8c-9224-41d9-b09c-b62c318b3f5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f8e43e-29f2-4d69-96ad-b6d7538dad2c", "sighting_of_ref": "indicator--d04e5fe8-2f0e-462c-b7e6-ee9d7315bc29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bae090c-81ca-463a-a521-990a6a196028", "sighting_of_ref": "indicator--bc27f5fe-f883-4e0a-a334-c20875189b58", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8435c82d-5982-45e6-a858-43b1b6dc0498", "sighting_of_ref": "indicator--5cdfc3b8-b7a1-4160-b9a5-6a06b1539287", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07db2ba-429c-4591-808a-5e520966946b", "sighting_of_ref": "indicator--bab969a5-bcfb-4540-9f16-dd25a4cc83bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceeb142-3188-4bcf-a1cf-e7af9d880b25", "sighting_of_ref": "indicator--273ba56f-5544-4193-ac74-6fe46743c3f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ae81f-db0a-4d7d-a6c8-14ec3d385330", "sighting_of_ref": "indicator--6dcbaadf-8aea-42f8-a91a-8cc05f0fa2c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9ec29d-2274-4449-a662-3426eaa552b6", "sighting_of_ref": "indicator--1a794c10-bc27-441d-9714-3ff9dc1d5f50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c719c8-ab51-454c-b809-13c6196848bd", "sighting_of_ref": "indicator--de5a5906-ce2e-4408-8984-5c454e418640", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f95f43-235b-4a02-9d9b-9e58aa3cfa17", "sighting_of_ref": "indicator--e4e5ff55-baf4-4bb2-b4b1-04e79192eb6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef4eb26-6b3e-479c-b06a-672ec7fb2d0a", "sighting_of_ref": "indicator--9e3855b8-d456-46ff-91ca-4c1a4b8ab895", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8904541b-5edb-4d25-8730-b4098814c2e8", "sighting_of_ref": "indicator--7f1770c6-c9de-4f42-a880-c91a1026f7ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d2ab93-6072-44bc-83c8-d480cf349844", "sighting_of_ref": "indicator--298ea148-cfdc-4cef-a8f7-6b1462f57a35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d669040-3f90-4d7a-911a-0653ad437b4a", "sighting_of_ref": "indicator--3c00c327-e4cd-429f-97bc-14f727dacd52", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c2b5e9-16ea-4240-8c76-c20f146a2ae7", "sighting_of_ref": "indicator--6b5b8845-b50a-4355-91d0-497338ad6c27", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2da6be-1faa-423f-8bb6-21c86a153e5f", "sighting_of_ref": "indicator--bcf9cb36-284a-44b9-b42a-9158f3d74b3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102c28a3-d85a-493b-88e9-7bfc3358e367", "sighting_of_ref": "indicator--02e5583e-7a46-4d38-9a27-79795af75464", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47e5121-a813-44c0-a860-bdcc1b9daaa8", "sighting_of_ref": "indicator--5255c697-e673-4d0e-9d0c-a7eac31e8d7f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265aad9d-349c-474b-8151-065e5fb0d8c0", "sighting_of_ref": "indicator--4d0ac81d-c21f-4f92-b682-fa17063c8db8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38af93dd-3756-4acd-adc5-740e9d215379", "sighting_of_ref": "indicator--b6358306-4413-4b45-8354-643e5145bb5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2ee695-e274-4c8a-b85c-ce3f913dd4e0", "sighting_of_ref": "indicator--5c5c9481-945a-4f85-8f56-ffed5927a586", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55cb37d-52f4-4fb3-aa3b-2bfa2030ac55", "sighting_of_ref": "indicator--884797e6-5237-48c0-b5b5-ac8bbbf3bfe3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffab99dc-018d-4e46-92bc-089c09bc7a72", "sighting_of_ref": "indicator--c98f13f3-e932-4a05-8121-10b24218fe20", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ec84f7-dbc4-40c3-9828-7848799b0227", "sighting_of_ref": "indicator--442740ab-7158-4c22-961f-a51dd7b71058", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91fa171-656c-4436-b508-ec98d53d5967", "sighting_of_ref": "indicator--effae6d6-521c-4161-803b-b4d54b1170e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8986fb-40d6-4166-8ecd-f9342ed1c862", "sighting_of_ref": "indicator--e5f92e25-3ce8-45c3-8001-721cd8a402bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4110211-7a60-423a-a9ec-34b5bcd5c1a2", "sighting_of_ref": "indicator--4f06c2e1-b729-4fbb-bf13-330ba0d78566", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485af0ef-a20f-4c3d-b452-196555524dd9", "sighting_of_ref": "indicator--1851815f-f1b6-490b-b851-607523497916", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8aa3b98-5895-484a-ac42-3d79621b24fc", "sighting_of_ref": "indicator--5b03fe64-c059-4523-9307-e5dae0507471", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c205924d-37c4-4c1e-9940-83cbfa4e793a", "sighting_of_ref": "indicator--5b76d41c-3d64-4434-9997-dd36f75d4c62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697bf53b-2ed1-442e-aec0-920e56755d3a", "sighting_of_ref": "indicator--7e47eb92-cde8-4ec5-bb06-7159515ec9fd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eee1795-812d-4eac-89da-af4c1e3ed2f3", "sighting_of_ref": "indicator--6b0ef5c1-5ee4-4430-a180-8feaf8b66c78", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d625a-703d-4248-9e06-9fd110d86e32", "sighting_of_ref": "indicator--766e3dba-1ef0-42da-a45e-199655ecc7dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98212712-9b3a-4c7f-8132-283542d9ece0", "sighting_of_ref": "indicator--7db2b2d9-65a6-448e-9447-acd55a427b34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dac1e9-1b5d-4efe-9de4-21f5e806c6a5", "sighting_of_ref": "indicator--5226645b-fe02-4645-9fb9-d71e0449c7da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16458edb-868f-480f-bffd-f252089fde41", "sighting_of_ref": "indicator--65c7ba71-aead-4496-9ef5-4a71b5ed32e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e32a79-ee8d-4f3a-b3ef-e1d702a86a39", "sighting_of_ref": "indicator--7dfa2749-55a4-497d-bc95-de8cab26390b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd002a4-bd95-48b8-a9b3-414278688737", "sighting_of_ref": "indicator--b2efe4f6-d5a6-4ea0-8b35-6f93b5880ec0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa55d5-7e32-4829-936c-525938c0244b", "sighting_of_ref": "indicator--ce57d855-af1b-49ff-9271-e568f94fdcaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77a57c7-0660-4500-bcdb-608dbd5ec73a", "sighting_of_ref": "indicator--e534a888-4406-429f-aa5b-b5d7a8b8923b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d90cbc5-48fe-4ef6-b819-9310e0dc992c", "sighting_of_ref": "indicator--983e3435-474b-4e8b-bf89-2e641dc8cc87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff1cbd8-4f26-4e51-9c35-54e337ed09e1", "sighting_of_ref": "indicator--1b239843-e28c-45c3-b590-35082b9a7290", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d965f313-33f4-497c-8432-37ccd8d5b337", "sighting_of_ref": "indicator--48854082-164e-4c14-bdd0-b50648b86a7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8ed89c-cf4b-4a45-b947-e2c530f59983", "sighting_of_ref": "indicator--97777cb6-0ca3-440c-a88d-da1e0257c135", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4dee58-aeac-4a59-b116-c1f8dce1cc5b", "sighting_of_ref": "indicator--ec9280c2-2475-4cae-8873-cc979c5963ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c52ec-cb43-4bbe-922d-c8854f7d6fbc", "sighting_of_ref": "indicator--0e9a06ab-9e28-4a17-8a8c-936f6cac916f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f772374e-5414-44d8-9b22-66bc2d21db7c", "sighting_of_ref": "indicator--37ce8ca2-42cd-46c8-9f7f-15d08b098365", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb47a511-21ee-4dec-acf5-24b3aee93e74", "sighting_of_ref": "indicator--5de85faa-5bab-44fa-9640-ee4d8c617c53", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942c3a89-b9ff-4579-b21a-5196c193d598", "sighting_of_ref": "indicator--30e9996e-f2bc-49be-9fc7-56f479892ec7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a152f4e0-4156-4a2c-8590-65354dda716b", "sighting_of_ref": "indicator--3e7e6ee4-3ea5-4ca8-8f78-2bffdb9f6904", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8279c79d-5f48-4f99-8d0f-a8a0c109c997", "sighting_of_ref": "indicator--0b47e3e0-0a55-4c10-92a4-7971fa8d2e9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f16d050-851a-4b69-aae2-3ba5e9b7a7ef", "sighting_of_ref": "indicator--79ebb9ce-112f-411d-8871-309d8710c0ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341c84b7-4c84-4399-8892-845bd8e0283f", "sighting_of_ref": "indicator--517fabad-f9d7-4b1d-b39f-4aef6dfa255d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa88a0f3-595d-43db-b345-b3e37d9646b5", "sighting_of_ref": "indicator--14d593fa-3422-4fab-8353-2c23d21b4de6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf22700-ce7c-4b1e-8d55-022925382fe5", "sighting_of_ref": "indicator--86f47736-df44-4922-bcd5-2e3558816a6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2586365-8681-49dc-8de9-d6caa09eed8f", "sighting_of_ref": "indicator--d2543138-d9d9-4a13-955e-a589cf8d45da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c707ac-210b-4d27-8862-c8ef85039e3a", "sighting_of_ref": "indicator--c5618f3e-c31c-4416-b9d1-60090a6611b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0992725-a364-49d0-b575-e957658dfc44", "sighting_of_ref": "indicator--aee3c16c-7d50-4b9e-b384-8e99f7d10cf7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b050438e-b4d1-442d-95ec-1c3801da1a4d", "sighting_of_ref": "indicator--ef2aceac-4c2f-4d36-a863-d73059af0b57", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fca4b8-ef2f-4dda-9f3f-2a13f85b3693", "sighting_of_ref": "indicator--603566be-1707-4bf2-85c9-05ce6d8f82ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aaed03-efe4-4425-aa6d-a012c6c46cde", "sighting_of_ref": "indicator--8f148778-7051-4877-ac7d-a6d784c000f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d309c48-bdfe-4204-a2a3-0af5446a1510", "sighting_of_ref": "indicator--ff03f6b9-3f75-4ab6-ae0c-69fc6a70b9ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117c29ad-0384-4b27-bdc6-15645f954352", "sighting_of_ref": "indicator--dbd80f80-f8eb-43ef-bf18-f48fd3223e67", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6210af16-e2c4-450c-8c9d-d3f95b52d7b9", "sighting_of_ref": "indicator--fe4607e9-7fe8-4a96-b810-5e9f92cd8cda", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc45db0-99b9-4ffe-b01d-dfb93989d650", "sighting_of_ref": "indicator--189dd3b2-7e80-469b-9b77-b7ddf61d9ffe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a643d5b-8de7-4141-abf1-ff20e8a16fe5", "sighting_of_ref": "indicator--ddceba51-4ae4-419d-90bb-75d704c557f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4189d254-0ebb-47cd-bb71-89302c984116", "sighting_of_ref": "indicator--96405597-8903-4ec9-b850-6aa0707970d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0108b8a6-058f-4ba4-86c7-b9c86bb25064", "sighting_of_ref": "indicator--cd072709-935d-476f-a80e-214eebd66de5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7199cda0-1cbb-41f6-9902-92a4070c7591", "sighting_of_ref": "indicator--de7ab05b-8d0f-4e50-8b02-5eabd42816d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f5f9ee-32e3-41cf-ab97-f94eae6226b5", "sighting_of_ref": "indicator--8e6d13a2-48d2-40c5-af12-3de7edd1792a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93a1f9-d47c-40b4-a5b7-6d5fc75697d8", "sighting_of_ref": "indicator--815fe718-a784-4523-a8f8-3d3f05ba4bff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc98e51c-e697-468c-9214-bcecc2dbf370", "sighting_of_ref": "indicator--7d3fbdb3-3ddf-4e4a-905b-a800881f2f31", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d540d1b8-5814-49d4-8f1b-0a7cf88ddef9", "sighting_of_ref": "indicator--f826246b-a78d-47cd-b9d1-062105011c04", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a94dc4-e9cf-413e-aae9-fd8fdf5d8222", "sighting_of_ref": "indicator--962eee93-3c67-48d7-9bcd-41d3953aef92", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6850a40-6a51-4ead-a2e7-b067af65791a", "sighting_of_ref": "indicator--3b5e1a13-2950-4e0c-a3f9-7768e33890e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478758c0-4840-4a0e-8d75-57f24dfa8bbb", "sighting_of_ref": "indicator--007408a8-552e-4e62-9933-8b941be5111e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c3aa2f-d6ef-4394-9511-3515af835918", "sighting_of_ref": "indicator--0350c7aa-2ad0-4294-8603-0de5151201ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997037bf-dca2-46af-9ee3-900e20a7c5bc", "sighting_of_ref": "indicator--40de545e-77b2-4623-80e8-984550fdf421", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d5e522-f819-48ae-9ce9-1df8ddedbd62", "sighting_of_ref": "indicator--5b920e62-dba7-4412-9efd-666343f584b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d150f0-52e1-4f10-a43c-5e87047810ad", "sighting_of_ref": "indicator--01e7f144-e25e-45ec-9d8a-4300a0e9b026", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cb3726-8f5b-42ef-82a7-7831d5316eea", "sighting_of_ref": "indicator--0b150f35-3942-47c7-9ae5-c1c36177dcf1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e36124-8f50-4b7a-97ce-76c932c80c5c", "sighting_of_ref": "indicator--7090a1d6-7005-46c7-9cc1-054ad2f705ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aca4f5f-498f-4a24-99f5-3dc826981f96", "sighting_of_ref": "indicator--6a24725d-0d4d-426c-89fe-b2867a132939", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6fd2da-c4a1-4f75-b333-a171a80d3497", "sighting_of_ref": "indicator--d71a2260-705b-42a4-996d-34c8f654eeee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13623361-ac6e-464f-ace9-34a8f04f7fbf", "sighting_of_ref": "indicator--bd00e5cd-4fbb-4fca-9d6d-d071ef85e689", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1691e3-a1db-4f68-b77f-8350373a3f8e", "sighting_of_ref": "indicator--a00408c6-e047-4e4b-8c0b-722e456432e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c580df-64a8-4c60-887c-84e670bb7de7", "sighting_of_ref": "indicator--d1e9071a-2b76-452a-8c8e-ecfef1f482ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38ef455-ab5a-4812-9f5a-eabb97c52dff", "sighting_of_ref": "indicator--8900395e-6d74-4228-99b3-6ea43f2b0156", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ef6f03-0c43-4948-ae71-c11a74bfb388", "sighting_of_ref": "indicator--e9d34249-8162-42b8-aca3-171f608830a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2594cf1-d068-44e0-b1a3-645b6c810fa4", "sighting_of_ref": "indicator--c4dcc945-84d5-4510-a04f-a4ec4f5e6e1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173183bc-c4d0-41a7-b4a2-e25d33b1c9f4", "sighting_of_ref": "indicator--91c15136-9402-479a-a6ec-232104db84a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcef5d3-a57a-42b5-aad5-3a186fd38954", "sighting_of_ref": "indicator--307a2002-5e05-47eb-8cb6-9571acd84bf6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c8eaf7-bfb3-423b-abd6-e0e6b479054f", "sighting_of_ref": "indicator--9e8b7a35-5591-4b01-bd0e-b15f03e5734b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ac7098-f130-4a69-b775-45d40ce33521", "sighting_of_ref": "indicator--2196b698-2b5a-41d1-8392-cc3f17ad5201", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b1da8c-fed4-43b5-8b2e-267dd68b2cda", "sighting_of_ref": "indicator--c29d62e1-a0af-4cfb-af13-ee8c7bf506c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f508439-c76b-442e-9776-62521112f7fd", "sighting_of_ref": "indicator--ee97c66f-9d47-46c8-9c4d-d7824d3f9f5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf16f5fb-763e-4fcd-bdb5-30c918d0cb1d", "sighting_of_ref": "indicator--1899727a-385f-40f6-bbc6-c741eb789aeb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b57ef7-7c1a-48a2-8f98-f424c89fee61", "sighting_of_ref": "indicator--585e77d1-9577-4329-9e3a-010b04714560", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf61b80b-9682-4d05-9944-75d758ed6304", "sighting_of_ref": "indicator--600a610f-ab8f-497e-b3af-4edb5bf542e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd1b8ba-cccf-452c-8683-589d2178b73d", "sighting_of_ref": "indicator--b3816737-8208-419d-a458-7d3e4abf26db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d74c45-ec93-44db-9352-5d38c03627ec", "sighting_of_ref": "indicator--4f149e84-e5e1-4829-aeb5-ba1e95624f49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6b7bfe-232b-4563-81af-a1cf43c61f56", "sighting_of_ref": "indicator--35d424dd-ad25-4f4f-bfec-84c7142d5c32", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6637b1a6-0c81-4b59-b05c-9ba651f8b955", "sighting_of_ref": "indicator--63a02063-1de9-46ce-b88f-3f0d263592c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0b97f3-ef88-4b43-a3e8-4f13f780bcc5", "sighting_of_ref": "indicator--2c01152e-00ff-4aed-9e09-c0916e4dfc26", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d724045d-35d6-4c65-869d-0cf54099196c", "sighting_of_ref": "indicator--adec7800-56f0-4e49-9b74-bb3ebf29a096", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacc98d2-4e4b-4b52-9f81-edddbb39586e", "sighting_of_ref": "indicator--f350201b-8be2-410c-a3e1-09e4e402c55a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4678337-6790-42c3-8d0d-709e871a4a7c", "sighting_of_ref": "indicator--7161dae8-d44c-471d-9e2e-b28c5448447b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5e29ac-e86f-4cf5-8b97-12c3d58da8a3", "sighting_of_ref": "indicator--8ebfad67-a20c-4c6d-b9aa-1bcb2584a8dc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea2b94-d1c0-477b-8ee9-845cac10a7a4", "sighting_of_ref": "indicator--d6ee0fbb-15ed-41c5-b054-7095125b6ffa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ef3bd9-61a7-4606-8e04-c310625297ba", "sighting_of_ref": "indicator--0641f544-998a-48f3-b699-b2e14fbbbc75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8d772-6470-43ed-8097-b9735e145359", "sighting_of_ref": "indicator--518fb82a-0743-45af-91bb-5bbbef4e9de7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be86e107-8e7d-44e8-9999-6cbf457557d7", "sighting_of_ref": "indicator--3e199afa-b199-4520-8169-344e8e4bc6fa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d58c37-c863-4ee8-a4a6-f9ca7c93bf66", "sighting_of_ref": "indicator--c036e1a1-3f90-4e05-ba05-d51d3fb86085", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bea5bf-6007-4473-986e-f4ea3295e046", "sighting_of_ref": "indicator--1d3b01fb-3916-4189-8b66-2b88c9083ac5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86953734-bb48-4be7-ba6a-c71155892149", "sighting_of_ref": "indicator--5e122c5b-0f3c-43d8-93fd-82f59410ebd2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc07a3b-ae9a-43cc-9e13-06e1e8a314fc", "sighting_of_ref": "indicator--c3bde043-79e2-4c35-9c9f-f12fb6f2e36b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6894e353-de09-4dbb-a39c-2f7afad3b416", "sighting_of_ref": "indicator--16290933-76f5-46a0-9408-15a89d1c2c49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df97aad-a6d3-488e-924d-d8060ee0823b", "sighting_of_ref": "indicator--306136cf-ae3b-4e0e-99c3-b54e8b248b0b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e17fda-5f7b-4ba1-97e6-5711c64878aa", "sighting_of_ref": "indicator--6a6da3a9-4181-48c2-a40c-3d15757c03ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8536e7-9df5-44d4-bb86-dff227e6c054", "sighting_of_ref": "indicator--281de13b-6c12-4796-acaa-ed0e065ffa28", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e223909-3319-48d4-b406-217541099fc1", "sighting_of_ref": "indicator--92ef0134-e4f6-47bf-80e1-838fecaeaba7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6131f67e-fbf1-4d6a-93c6-ac9b15a71206", "sighting_of_ref": "indicator--d8c615e5-ee6a-4d13-bb8f-d97054c01490", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f5b90-47ca-45b6-b2aa-7af93b96c47d", "sighting_of_ref": "indicator--1e6233ca-40af-43f6-b331-19fd042068f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bb3ad9-0119-4982-81f1-97ab60748273", "sighting_of_ref": "indicator--f7a245b8-8a65-4278-a290-3a5dd446a515", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe704d3-c656-4e67-8dc5-26dd0d0529c9", "sighting_of_ref": "indicator--b5912b3e-1171-4f90-8997-a16ee17c8363", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995dbc09-63f9-40f2-85be-c04947226b6c", "sighting_of_ref": "indicator--c134f86a-b2d7-4131-8c90-72ebeb4284b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c84ed61-d668-47e4-b7b1-ec1a15213910", "sighting_of_ref": "indicator--73e8faa1-465d-49db-95b6-0c6ea14ac2f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac1370d-7360-40a9-b468-149695f2dbe3", "sighting_of_ref": "indicator--6fc4d927-9298-49e8-bb06-6e67ad24e130", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e96b28e-601e-400c-b2df-a71880ddc442", "sighting_of_ref": "indicator--cd4674b0-f225-4fa1-b9ed-9d55d7acf0ec", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d516aa-2950-4ea1-8180-f492b3ba8cc4", "sighting_of_ref": "indicator--23fa93d1-e8b4-4a5f-bfe7-e903003d2dad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2dcf91-e37f-4440-bb97-9e2d8a8f43eb", "sighting_of_ref": "indicator--677f0a3e-a741-4375-af36-cf2553147239", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a36e280-e48b-407a-afca-1896e4d92f80", "sighting_of_ref": "indicator--94bf9acb-0efd-4009-9a95-3666d3e5f3fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe6e4d7-5ea7-4b50-b46c-4455f35e79ce", "sighting_of_ref": "indicator--e4450b6e-b323-4731-9b31-2b94d2eb0900", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1318e90-855e-4bc7-9d7e-b3f1392c1684", "sighting_of_ref": "indicator--75676cbb-22a3-42ad-921a-f68ef821aa4f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c27165-0707-49d2-a2ff-73dcd6d82c5a", "sighting_of_ref": "indicator--fd3a6063-d1a0-421c-8f32-245a29a279c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d98ce8b-89e4-43d5-9912-5640a355289b", "sighting_of_ref": "indicator--a9ddd812-172e-4c14-b67f-0dd3761da0d6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1814d9a-8744-4779-b6f6-6157d095f4db", "sighting_of_ref": "indicator--a04020ac-6264-4ef4-a49f-634b9063651a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40605563-5760-4b6f-bcf0-5d75078e370d", "sighting_of_ref": "indicator--78ff8e14-c5cd-4271-8a7f-2867fa7b053b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d89ade4-d160-4b4a-b36b-5556b8b260d8", "sighting_of_ref": "indicator--0feb878d-79cd-426f-964a-5e70ec59f557", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49251043-078d-4f67-9e82-c0007d9fe566", "sighting_of_ref": "indicator--6d326db1-5120-4ff9-8dfa-8dbdc8ac2799", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f6e62-8ff4-45b0-bd9a-30d38e107a3c", "sighting_of_ref": "indicator--545df5b4-72ae-46d6-832b-04b216035ef6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc44c076-1139-4c5c-b577-594b44762bf0", "sighting_of_ref": "indicator--b96e8d7c-6e8c-4db7-84fd-9e4196e80f8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624d2b6e-f2c1-4761-9f40-c681522dcfec", "sighting_of_ref": "indicator--ec735aaa-5a3e-419d-ba33-aae508835204", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60fa828-8b73-40a3-b69a-09da2d492a0f", "sighting_of_ref": "indicator--7f5e87a1-518f-419a-a2e6-3abe5c937f59", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd264e4-398a-4e48-80fa-d7e42958b703", "sighting_of_ref": "indicator--ab140b09-18cd-4ff0-bc3f-6f8e71a106b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796de0f1-04f3-4d1e-9816-15c776f4ef7c", "sighting_of_ref": "indicator--b2764479-0ee1-404e-8b90-8ed41802ca77", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de6e7f1-75e4-4898-96b7-fa98bd6674e0", "sighting_of_ref": "indicator--34673ab3-59bb-4df9-9c0a-566e79b14c1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d980b80-3b19-4284-844f-e573d9369d82", "sighting_of_ref": "indicator--942245d1-a8b4-4651-99b3-be5a947d06dd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647e12aa-b479-485d-8367-b033f04707ce", "sighting_of_ref": "indicator--0edbd77b-95f1-4fb0-a895-d61edeb4162e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e8c882-9242-41a9-8981-d9dd004a299f", "sighting_of_ref": "indicator--1aebf703-63d6-4408-af54-0852c9b97523", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46524fe4-0115-41b5-ab7b-0dbf6ae0f257", "sighting_of_ref": "indicator--59c035ff-3f01-484b-bb7a-24fce3f2bae5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099e78ec-9d39-4a15-a00d-9ece1e7bc714", "sighting_of_ref": "indicator--781b189b-2fea-4b7f-95f7-08e686d9f8d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8dc363-0b32-4336-9437-f1a21d4814fd", "sighting_of_ref": "indicator--e55e7018-b776-48e7-a0be-432b0f8875de", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d58e8d-ec2b-417d-94a3-77ffabcab701", "sighting_of_ref": "indicator--c549837e-ffe1-48f7-827f-e2a2f4e17ce6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489cc60-df94-4893-b9d4-74b1aa6952bd", "sighting_of_ref": "indicator--2749dc76-9cd5-4cb1-9385-acd6ffa5973f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da2fbc-bc68-48c3-b23c-ba84fb329689", "sighting_of_ref": "indicator--cad90c8d-e42a-4ffa-a321-9183cdf634db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c400df-189a-494b-a78b-3d08ad16f73a", "sighting_of_ref": "indicator--c00f5d88-6e9e-49ca-9365-b215c058833a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b743bce6-5877-4167-8134-74cc388a2b79", "sighting_of_ref": "indicator--26b49a31-a154-4c90-854b-2183d7765b90", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9afdd0-0787-423b-8016-682a1058de47", "sighting_of_ref": "indicator--dd2a65d9-779a-4b70-8aa5-4baba9d87d54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5dafab-14af-45e0-9ccd-91da2372b03e", "sighting_of_ref": "indicator--73b76078-f8be-4a6d-881e-a5021786777e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c343db8-3c41-4a7b-8187-48e93ebc682b", "sighting_of_ref": "indicator--cdee0e33-5856-4374-a1c8-045819f6b3bb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5f2cb8-0241-4f4a-a79d-58bc7734430d", "sighting_of_ref": "indicator--1d8271bc-1359-4465-a3c1-9b01c0ea128c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9563b319-370b-4443-981f-05441768da4f", "sighting_of_ref": "indicator--1d8271bc-1359-4465-a3c1-9b01c0ea128c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8d029a-6c44-4205-abac-9a159f7d8d34", "sighting_of_ref": "indicator--f68f6487-081e-486a-9e4f-a6877e7741b9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a610b62-3354-4a4d-95fa-6cd11ae736fa", "sighting_of_ref": "indicator--9915d407-2648-4fa8-a578-85df65cc11d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a145b3-0aa0-4201-8ca9-86b94e5753c7", "sighting_of_ref": "indicator--69b48e8a-14a6-4d6b-9a04-81a8a72c8a11", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843be5f-c4a2-4d54-b35f-0d85f8f48988", "sighting_of_ref": "indicator--b670f8f8-08cc-4f34-a014-d73a7221d0d0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9aa581-158f-473a-9c3f-b73380b0d7eb", "sighting_of_ref": "indicator--24d6c7a6-d640-4214-8671-ac8453618cc0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca3508e-df78-4de1-99b5-dd70487b32b4", "sighting_of_ref": "indicator--64cfd8b5-8101-499d-902a-f563a3e6f182", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e422dbb-3a04-41e1-85bd-59767da5473d", "sighting_of_ref": "indicator--64cfd8b5-8101-499d-902a-f563a3e6f182", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9071ff24-c17b-402b-96c7-f24fcc129f9b", "sighting_of_ref": "indicator--45de48b1-1444-4d47-aad3-15feddffb363", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5445cd-cdcd-42e8-8a0e-26900bf8a72f", "sighting_of_ref": "indicator--19f33bbf-3238-4c2c-a0df-c6b6331ff50c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2917a82d-5f23-4b57-8ef9-488bbd1c2b02", "sighting_of_ref": "indicator--19f33bbf-3238-4c2c-a0df-c6b6331ff50c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b56af2-7550-438f-82e8-d62d9de4a9c9", "sighting_of_ref": "indicator--151b9599-fc18-4f57-9069-d53e7f5294d1", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b819afae-d68c-4d22-b080-27933360eb37", "sighting_of_ref": "indicator--151b9599-fc18-4f57-9069-d53e7f5294d1", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3f2e48-68d1-4f52-a48f-aa578146ef3b", "sighting_of_ref": "indicator--5c0f7215-db87-40a3-9fc3-71a4fb18f041", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd931c-e2a3-4f09-982d-557ba7b39690", "sighting_of_ref": "indicator--5c0f7215-db87-40a3-9fc3-71a4fb18f041", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a54f78-2b3f-4494-a15a-330e77f4b8ed", "sighting_of_ref": "indicator--ab427837-ccd6-4553-8e05-320344492566", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce443310-cf9a-4e74-8c9c-0376d20093e6", "sighting_of_ref": "indicator--ab427837-ccd6-4553-8e05-320344492566", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3373eb07-b42e-42c1-831c-87961ad33b47", "sighting_of_ref": "indicator--4a272ea3-689f-4b01-a7db-cb521b3017f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318c7eef-f4da-4ae9-b20e-5de03789815c", "sighting_of_ref": "indicator--a75022c2-cab3-47be-93bb-08b6f6da78a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b688f1d-ffea-4e1c-8a77-ba2705ab7cec", "sighting_of_ref": "indicator--cddf3f3b-db5b-4bef-80c1-5d72408d8baa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2141548-7bd9-4679-8f47-702ada4b78b4", "sighting_of_ref": "indicator--f3b76f1d-08b9-4776-aa74-0073be2a132b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ef82cf-9e7b-4eee-a335-9a11013463fd", "sighting_of_ref": "indicator--7470281a-601c-46fd-8bd1-9f48dbd4a16b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afd5a57-b20d-4dd7-8aaf-67f3c706d52e", "sighting_of_ref": "indicator--88b5b45c-af92-48d4-b4a6-748734a5ca99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8ecc8e-fdfb-4251-be04-4651f1a53e29", "sighting_of_ref": "indicator--770d4455-4b51-43c5-b55b-985be065bc20", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306fc96c-05a6-4b12-868a-93dd603675ba", "sighting_of_ref": "indicator--ba7dd255-129d-41cc-8707-5b1b1e1a60b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c42003-3d4a-4252-a068-c8ee9d1b037f", "sighting_of_ref": "indicator--d5dc0879-6d04-490f-b922-de6856e1204c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d4406-2dbf-45d9-970b-495417fa56f0", "sighting_of_ref": "indicator--fd249fc5-f94a-42c7-a63c-cb1d5a92c359", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd91be2-405d-4343-8b38-d3b6cd339896", "sighting_of_ref": "indicator--9c9658eb-6d28-4140-8faf-88305a0ad4aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e438b7a-488d-40ea-9263-5d2987b6954b", "sighting_of_ref": "indicator--805618e1-ac54-4b9c-b733-6cf1189b4392", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bef41b-4a53-4cfc-ad97-7652160323b4", "sighting_of_ref": "indicator--4bcb9311-e27d-4d92-8007-08e67607c45c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691d36e7-76da-47b3-a9d1-11241fb8fd01", "sighting_of_ref": "indicator--59e9e350-2a03-43a6-af87-329c66ff3772", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b3f386-2041-486a-8d3a-2bd34fc273b0", "sighting_of_ref": "indicator--702db57d-0879-4b7f-b567-3bef71cd7d2f", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6238ce28-7360-4771-b2c4-0d49d6523811", "sighting_of_ref": "indicator--49fd8794-d648-4f8d-bce9-2e014e51bcd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bca313-a4eb-4389-b115-c976465aad8f", "sighting_of_ref": "indicator--11074983-3ee5-4934-8834-49e369e410c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ea860e-953c-4771-849d-c199c644ab7e", "sighting_of_ref": "indicator--fc5a8697-8132-455c-9be4-a21102364fca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fddc34-15c6-4211-8c51-461abe58fd9d", "sighting_of_ref": "indicator--3dd1a85a-6b0c-488b-94ed-2645aadb2087", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d99e8e6-5b4f-465d-b933-362d29649325", "sighting_of_ref": "indicator--d4b67f23-90f9-46dc-8d46-e21d63f15614", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad38fb8d-1ab6-4f4c-8c76-a2cdb5961eaf", "sighting_of_ref": "indicator--02f4ca53-0440-499d-91f9-e7c5d4aa5622", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13950c69-3830-4232-be29-70a891863148", "sighting_of_ref": "indicator--915ad62d-e9fc-4f58-bb0a-d3e0c18eee2d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa1efa5-2a52-48e3-902e-3fdcc76803c1", "sighting_of_ref": "indicator--721acb68-9440-4f71-a78b-a22e907725fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da372dde-3e94-4350-b823-6c92a161f9ea", "sighting_of_ref": "indicator--f132f8f7-88a0-4aea-9348-fc0f3c3c4e62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1bea8e-07de-4b98-b376-28f7c1126ca7", "sighting_of_ref": "indicator--c60bff42-f5d7-4ef1-87aa-217c1f6e8c34", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77236935-2e53-4028-a76c-17a23c731b45", "sighting_of_ref": "indicator--11ae0ba5-9b27-4e2d-9ba7-adf2129989ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c394d-6326-49ce-ac1f-d671c6840481", "sighting_of_ref": "indicator--d539ee8d-7179-4da8-a782-4e507eea0f70", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4188bccc-5e1f-4eab-97e0-cfa8197db23f", "sighting_of_ref": "indicator--d4552a3f-6cc4-4268-9208-ef492bc747e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92081e44-064b-42f3-b530-986d21164cc3", "sighting_of_ref": "indicator--fc6700be-2d59-42cc-9aaa-c44a762d171a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff26bf6-1a58-4bce-b2b9-1b96bc7ed4cf", "sighting_of_ref": "indicator--bbc34f7d-5307-4d98-aaff-8a29fdb3f2f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4271bc3-29a3-4186-bd30-6a89df686ef5", "sighting_of_ref": "indicator--8e1b59e1-c162-473a-a091-e7c0a664daa4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5491911-c2f9-4473-bef9-b5566c1bc733", "sighting_of_ref": "indicator--2e3e3dc9-03d1-4df9-a83c-c979019b18a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14236cd5-ed2e-4f48-9b4f-0593950fcefb", "sighting_of_ref": "indicator--138b7393-7e9d-462c-9fa2-76d0000999bd", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc3d420-4b65-442f-affa-0df0b2c2eaf5", "sighting_of_ref": "indicator--6497cd99-1fd4-4d66-bc44-d884363d4f48", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00d0ff3-09ba-4bee-b7e9-b53fa903f77b", "sighting_of_ref": "indicator--19fc4f56-8cb9-4e92-900f-3ca16186aa57", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1710413-3db0-4880-b48f-4a01eab4674f", "sighting_of_ref": "indicator--9a7be0c9-6b74-4326-9a24-419729ccc6b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2598758e-c2e9-4cec-b9d8-729684ec601a", "sighting_of_ref": "indicator--1720f40b-6916-4875-b157-c9203d8b80c1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa01c54-d84f-445f-8c85-60d663b52cc9", "sighting_of_ref": "indicator--dfd5513c-ab61-49c6-ac06-005c83bfdb86", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baed801-2493-49a5-a517-7b826f2838e5", "sighting_of_ref": "indicator--dae4c203-14e9-461e-bf0c-95683c6ec2b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeec638-f4cb-44f3-ad58-14a76d871f0d", "sighting_of_ref": "indicator--43b40b2d-a867-4c9c-8a73-50feee658ec1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef72ae6-81c2-4b30-a4e0-28d575c52d16", "sighting_of_ref": "indicator--3ebcd007-2546-489c-97de-ab2553307127", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004cd6d-d576-4c69-aba5-86090f2751c8", "sighting_of_ref": "indicator--41019b49-973b-40c7-b8e8-87d698d7bd8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f51e3e-2b98-42cf-8237-074ab7c1dcf9", "sighting_of_ref": "indicator--f77d093b-f8bb-4221-bee8-fe8c2531ee3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2ffd1b-b957-4dd5-b811-451b6376774e", "sighting_of_ref": "indicator--8d4e921b-c57c-4af6-95a0-baf514b6dcbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82297a5c-3b95-4076-aa03-b5dd7627cc58", "sighting_of_ref": "indicator--01e3234f-1537-4625-b414-9b79f755d390", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd735e5-4715-4536-b815-9b18ce07ae83", "sighting_of_ref": "indicator--3f52fcbd-51d5-4452-bb60-679667566a6a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeacfbaa-19c2-4981-8a18-efebb00ab46a", "sighting_of_ref": "indicator--9604a39c-dfc0-48da-bcee-b546be966e3b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ee1db-044f-4256-8410-d0cc6a980f5a", "sighting_of_ref": "indicator--3c941ca7-c5cf-4535-bf9a-669dfd976151", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e95312-f0b0-4fa3-8197-d3a4cd986ca4", "sighting_of_ref": "indicator--db4f6516-6ae2-4540-bfd5-0b08d295c020", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e98c77e-cc67-45c4-9018-b3074c683fba", "sighting_of_ref": "indicator--a2fa0c92-e71e-45b2-a237-3d078c32de6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394d1a42-c203-472f-b938-98dde1c7b838", "sighting_of_ref": "indicator--ec5b1998-b553-48d6-915a-c7a56edf7058", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d7a35d-8846-498e-9bdf-7eaa4bc21076", "sighting_of_ref": "indicator--75d61fbb-1e0e-4f5f-84d4-834d62717294", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcbe448-e477-4b4a-a444-15af813ddfdb", "sighting_of_ref": "indicator--92db9978-93a9-4bad-a6d2-72906f30897a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e724b3d5-b93a-4ab9-89ab-d31f5222ccb8", "sighting_of_ref": "indicator--1586a698-cd8b-44db-b1b8-b4509fb046ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f02e1a-bb7b-4f78-9fb8-37c32fd8627f", "sighting_of_ref": "indicator--402dc1a2-e40a-448c-89e4-868554fee383", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c773f6f0-93a4-4aa2-b089-381214d0dcc0", "sighting_of_ref": "indicator--bd2c7d3a-d73b-404c-826a-1ff980913bc6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4820fb1e-1f90-4d80-bda7-6bf3392a9deb", "sighting_of_ref": "indicator--c1867e52-b998-4f5c-a84f-d3be88cc3b7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf69ad39-c53f-480c-bd32-4d6e34fdbcbe", "sighting_of_ref": "indicator--37392ffe-f12d-4379-a284-d9521900b89c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d7708c-5d3e-455e-b1fa-9611a030c216", "sighting_of_ref": "indicator--3a77ae33-5c36-427b-bdcc-93440b8c468c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9080ebdc-a323-4780-b952-76026fd0f45b", "sighting_of_ref": "indicator--15bd7454-163e-4a9b-927e-d00adb3bf596", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813ed954-219b-4247-8fd8-c95540657d5c", "sighting_of_ref": "indicator--079a39da-a9f5-43e4-b921-e779106dbab6", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5260d665-32bf-4aa7-924f-185a1bc60d31", "sighting_of_ref": "indicator--8d47420b-a009-429c-bc90-921680beb588", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb1ebab-f196-4bd5-8aca-3bf83f10f8af", "sighting_of_ref": "indicator--af2d73e4-1b9b-43eb-9682-c1c76ef98b13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7e36b6-a9fe-4c50-a227-174dbe4ef870", "sighting_of_ref": "indicator--1d6a534f-1969-4d1c-849d-8b48a1424467", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df28115-8f0f-4d83-bfd6-20a65e811d35", "sighting_of_ref": "indicator--9aeef704-78d0-45bb-bc60-4645ebd7841a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71b6c50-9903-4fb6-87b7-f66a85e994f1", "sighting_of_ref": "indicator--c8d39f70-14f1-467e-853e-b497dfffbd12", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10334e0b-b918-4f7c-95cf-d02106f03faa", "sighting_of_ref": "indicator--45163483-d4b0-40ae-85fc-b4f0fc830c3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75f7e23-6c51-480a-93f3-28e9f1be8384", "sighting_of_ref": "indicator--97f8da95-0383-4159-b01a-b97d4e7d4e3f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b82c1-c9f9-4186-b855-ceac40f003a3", "sighting_of_ref": "indicator--d166f0a2-f375-4ec6-ab77-a7c48720c6a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae069bbe-dc68-4798-bb5e-ad1536f60863", "sighting_of_ref": "indicator--983fed88-7e65-417c-b1f2-9c2e2510cd26", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1aa200-3315-42d6-8a1c-5f96bf1b12a4", "sighting_of_ref": "indicator--eb0a9d87-03a4-4ce8-8082-2d4f6a97b1ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64458f5-7c84-41d5-9714-d5c6a0598841", "sighting_of_ref": "indicator--7fbd233f-9f98-443b-b2f5-7f97f30776b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b8c9f4-9ab4-43d7-8b65-93ec6464fa05", "sighting_of_ref": "indicator--0ba1b4dd-f7f7-4146-926c-6caf1a6b48f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b845b6d2-1b28-47e2-a371-f16bb3427712", "sighting_of_ref": "indicator--6fba609c-1197-4d91-9b07-8f339267aac7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22cbd48-2a2e-40c0-b508-50e255e0903b", "sighting_of_ref": "indicator--81a5f755-1041-4aef-bc97-9c9a99af0a5e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3ae571-1075-448b-8b0a-98e41422186f", "sighting_of_ref": "indicator--55d75ee8-badf-4819-8f99-590eebab4e1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be13a7d-29aa-4cfb-b07b-39a8881127bb", "sighting_of_ref": "indicator--2b6bc141-18a6-4138-960b-710df1eef07c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb0aa59-149e-429f-b3d1-53c554dcf90f", "sighting_of_ref": "indicator--5fe15685-2f6c-4ba0-bb66-c89d7539a314", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109f495d-3486-4210-bcce-4ca8405c227b", "sighting_of_ref": "indicator--2bb219b4-dd6f-4e0c-aa8d-64276a39b1f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b617be2a-1a1b-4eaf-98ad-3761e8743283", "sighting_of_ref": "indicator--909bcac9-60f6-4387-92b6-f0dbb3d1f518", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7f5083-107f-4107-a70e-3dc0ad2a39b6", "sighting_of_ref": "indicator--157925b5-c15b-443e-8b07-54a349eb49ef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d98bef-ce86-4101-9bf4-9be2589efaaf", "sighting_of_ref": "indicator--18f46ed6-e9a5-4b63-b151-4d695928d434", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a82b839-8bee-4094-af74-d47d0908017a", "sighting_of_ref": "indicator--1f0c49dd-7c5d-499b-a9fb-6e0741826050", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2706a4-2ea8-4259-b902-ab143e2d002a", "sighting_of_ref": "indicator--34a03cc6-7632-483b-9f26-1d291292c988", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3716936-8644-4c21-bc35-6ecfd3b39b3f", "sighting_of_ref": "indicator--8f49fdd1-8e99-43ee-bd6b-a6042a5019a9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346def2c-299f-4587-95e9-a81deffec8bd", "sighting_of_ref": "indicator--629505cb-2a17-4411-a898-c2486bf63736", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976d226c-82d0-4528-956c-147460389512", "sighting_of_ref": "indicator--0a84bb2a-970d-4866-9232-137accd74b29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2837f6db-659d-4c22-a214-3bec53c75dd5", "sighting_of_ref": "indicator--e28b323c-cd4b-4c60-9981-0e4b5c833e18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d6121-7ed0-444d-a31a-29bfa632dfbf", "sighting_of_ref": "indicator--6f3ba6e3-f145-4a0d-b7fe-3df47263408c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045b62a1-1144-48f7-b8a5-0d07684bd800", "sighting_of_ref": "indicator--0d06938e-2a06-4ec8-a6fb-055424b97312", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029583f1-705f-4e2b-8294-377550dcd6a7", "sighting_of_ref": "indicator--6397a209-e146-4d9b-9682-e0006e7d0950", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be82476-afc7-405b-abe0-13924a6e0717", "sighting_of_ref": "indicator--d4e0465e-72f3-485a-ace5-29477ab0ca98", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972498d0-181f-4ea0-a25a-c326c61513c3", "sighting_of_ref": "indicator--3e5d2fe2-099d-4810-9f9b-7ff60dc9a348", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1357b7d7-85f1-452c-a121-9b84b72dc0f5", "sighting_of_ref": "indicator--47ebd85b-2ee7-416b-b161-7514dfe55079", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336c018e-541d-4a5c-89ae-2c7baf3a8cd8", "sighting_of_ref": "indicator--f623a310-0bf4-4a57-9877-9be830e1785b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3990bdc-3b24-461e-9f6e-e9ee98ef13b6", "sighting_of_ref": "indicator--d36e3345-2706-41a5-b876-a0b58a364c23", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a9f103-1318-4a6c-aa7d-3b92d604343b", "sighting_of_ref": "indicator--096a9b1b-a0ff-4b74-b865-65c04ecea53f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ca2fc0-bbca-4b67-a862-7d33bf3b8c98", "sighting_of_ref": "indicator--872993fb-3210-45f5-877f-7678b9a2eddb", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48348137-dade-433f-8895-8efd430acb1b", "sighting_of_ref": "indicator--982a36ef-9d8d-4758-a613-3fe91f6bc773", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d39203-6108-486e-b5fa-1b0c6ede8b06", "sighting_of_ref": "indicator--dd5038e3-4474-40ac-80c8-64dd3efa2137", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3578f097-0290-4244-96ee-207e5d4a1c10", "sighting_of_ref": "indicator--986769f2-2418-4d21-b92e-5d824abe5f7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d37c85-ddc8-48c7-a59e-b768dca7e634", "sighting_of_ref": "indicator--3bb894c0-f759-4055-8d8b-2d74e0be61e8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedec9c2-3b9d-4f38-9fdc-3f582a9d95a7", "sighting_of_ref": "indicator--99b6ec3f-23ff-48af-9360-ce2e55f19914", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be833d-e3e2-4a8a-86c8-9aa90f15903b", "sighting_of_ref": "indicator--ee008da4-4edc-4c51-a187-3cee1ef12b36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c09f54-8c34-49c7-9ff3-cb4d4389764c", "sighting_of_ref": "indicator--9847d270-fc11-42f4-a295-47809bd48b93", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74908e16-a4eb-40cc-9781-5cea6226f2b8", "sighting_of_ref": "indicator--56b44343-2bb4-402d-9b4e-82aa3e273d1f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55df43e9-4190-4016-b517-eec075947e08", "sighting_of_ref": "indicator--29e2c431-20e1-437b-a8a1-3966966ea807", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecd5f03-9b95-48f2-9e12-68c1057559d9", "sighting_of_ref": "indicator--c5eaa335-87c9-46bd-a110-68bfb55db25d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad6741b-a104-4851-bf62-2e4deb25833d", "sighting_of_ref": "indicator--0fbf46f1-19ea-48fd-b313-5b3191fdc864", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67bcfa9-00bb-44d8-b813-4a986d8d3372", "sighting_of_ref": "indicator--5dacb87c-974b-4fde-9531-5e2b70ab40ff", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40c2526-5be3-433a-a066-58871122e058", "sighting_of_ref": "indicator--bad0ea1c-092d-448d-a641-0a19817184e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31202a03-42ab-4a46-bb97-d6ef352b2a29", "sighting_of_ref": "indicator--fe27dc45-0939-41d9-bc32-d9491527a4e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e166bc03-4900-440b-a32c-3e3a6fc984ab", "sighting_of_ref": "indicator--728ba4ea-de7c-4440-acd1-59d0e98b24bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a134574-f380-42bd-8382-c8c2df24b201", "sighting_of_ref": "indicator--a74c3677-712a-467f-a9ec-d33866e6e759", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6219342d-0edb-41a9-b1ad-37c49ce0aa8c", "sighting_of_ref": "indicator--bb37fac5-a6b4-4c9e-b9fc-7539a0dd4cf0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d58f867-b20d-4eef-b2db-860214ea019f", "sighting_of_ref": "indicator--c1c451a0-8a72-4c1b-a393-fe0637e8e83c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789401f9-8437-4f11-882d-5a7d893eae15", "sighting_of_ref": "indicator--14f57d24-5ad2-4b7a-9151-c3c417463eca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2757d807-5307-4459-941b-7ea7f44903de", "sighting_of_ref": "indicator--8b2e2740-a9d7-4965-b29d-f14c489cfa64", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a970973-c27c-41d2-be47-260816f326b0", "sighting_of_ref": "indicator--5d833b33-a05a-4c3f-bdc7-501587850709", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ad701-019f-4343-8854-58f345c6b1f1", "sighting_of_ref": "indicator--36a64a46-0469-4b9a-bea7-8a2227db0e5d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03baab6-717e-4581-bfb0-c36b1b91a6d2", "sighting_of_ref": "indicator--c33283ee-4ee8-4a0c-954b-0cdd13a0fbd5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b14535-49ce-46b0-86f0-e7a5e4bb3c5d", "sighting_of_ref": "indicator--54614e95-df7f-4a52-869a-e9314ace1f3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db93b6dd-fc98-4089-ba2a-22f39d045561", "sighting_of_ref": "indicator--2dd639ff-a484-43a0-9b14-63fb2cf8dc6d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a78bdb-781b-47cd-abd4-874cb0d73a7e", "sighting_of_ref": "indicator--7f2d5833-e39b-462d-ab51-7e9d73e02c89", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8b497e-1fe8-4a2f-a541-cddaf66ddbde", "sighting_of_ref": "indicator--6ddc3aa8-5450-4ead-a5f4-19a9ad453701", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac88f9a-e955-4d96-9998-ddde3fb0bad6", "sighting_of_ref": "indicator--c2563028-1639-4d59-8ac4-2beb307285c7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede32afa-67d9-40c3-96b6-6a899a25b914", "sighting_of_ref": "indicator--8188e5fa-a95e-46fe-9e18-424c1e708e35", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3972ce-6212-471d-9ebf-4d1f6aca588d", "sighting_of_ref": "indicator--955e1007-40ff-4c6f-8013-839a9f5405e1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63da6af6-bb83-40a8-a49b-6aa253a5cd28", "sighting_of_ref": "indicator--54a74bd9-a769-4eda-9531-3cf567378eba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa88529-0835-4128-80d2-bdc8a80d04eb", "sighting_of_ref": "indicator--aa3e75ff-f50d-4f63-b4cd-e30973c60078", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affb6ff3-ca58-474a-8300-b05dacb9336e", "sighting_of_ref": "indicator--fafd2522-0f78-45d2-98e1-ca72f6ebcd0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14dd21d-5db1-444c-ba0d-4440f950248c", "sighting_of_ref": "indicator--bed489ac-1487-4e6b-bdd4-bdf15c3d6d7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d788b873-cb42-4d9c-9df1-1baaa9d33cf4", "sighting_of_ref": "indicator--f5646564-ac46-4ac0-9126-dbf8aaefbcf3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879fa81a-ff4d-4867-b4a1-2a1c3ac49333", "sighting_of_ref": "indicator--e0d3bc71-5ef7-42f9-9c4a-6e9128484da6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03aba970-8313-4d65-b7f8-df967f744d88", "sighting_of_ref": "indicator--e1254099-3e58-4cef-a033-dde7679e3969", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06794841-1f31-4482-b061-d2e16486b3d2", "sighting_of_ref": "indicator--eac19637-c967-4f64-8026-405fc4c81907", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003c521a-ca08-4bdd-b43a-b91cec4266a0", "sighting_of_ref": "indicator--abb03607-cc1d-4f82-aacf-48e4006e7aa8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26dd9d5-a91e-4803-af46-c2bd042ba9b2", "sighting_of_ref": "indicator--9b0e206f-e461-4f77-bd3f-00551722461b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e172d-1d23-43af-831b-58189d2f16b7", "sighting_of_ref": "indicator--32e4ea44-49da-46a0-bc04-a9204cc39653", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6caa298-0768-486e-9eff-e2d2ee1d7793", "sighting_of_ref": "indicator--c16f29f7-fa0c-4f36-8980-d5b2494987d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55240a24-688c-446f-abe8-eee0776ff53c", "sighting_of_ref": "indicator--c0eebae1-384a-4db1-8c2d-c950a1a5cb5c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d1d70d-76ee-495e-beff-8522b4951af5", "sighting_of_ref": "indicator--3bcac0a0-326a-4c78-a17a-3f334aa91b30", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688fb8db-fd47-4143-b3b4-a6bdd88aa308", "sighting_of_ref": "indicator--3b96f0a5-229f-4754-beba-b3d1feb1fdb6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ad9bf1-0aee-4912-943c-8a18c4b86723", "sighting_of_ref": "indicator--8033bb82-8396-4108-9ec2-d17f31f7ecd8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ce15bb-f36a-4758-bef4-886445d9f49e", "sighting_of_ref": "indicator--0046e53b-bef1-426a-bef1-da56c0d398e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925527f9-6503-43fc-8d84-69bddb083366", "sighting_of_ref": "indicator--579d9b0a-375c-4f8f-9148-10c15cde7bd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1151cc-27a5-4d0a-a8f1-43cce0a79265", "sighting_of_ref": "indicator--d67c4fb4-213f-4c44-9172-574cc7acc414", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15929f70-59af-4ce3-b3f9-80329e5f2cbf", "sighting_of_ref": "indicator--fe68f6d4-bfae-4cf5-ae05-538be3ada60d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aed72e-2a41-40d3-b1e3-d79be50637ae", "sighting_of_ref": "indicator--6633b8e4-91be-4674-9c81-5285c5de8752", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1376dba0-0af4-448c-aa5d-4bc659f30a1a", "sighting_of_ref": "indicator--3f275c64-42de-4bd8-a740-ebb538215856", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a701f6e3-933f-49ef-b0b4-b8ca9051566f", "sighting_of_ref": "indicator--4db76b42-e344-4fa1-b9e9-1caaf17e4611", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f651a4-3a36-4da0-8d93-2de13ec89bdb", "sighting_of_ref": "indicator--4e17cbca-93a8-4b87-aef5-e5cf22ef2b17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5a845a-b13d-496c-a929-1c85b5fd15f0", "sighting_of_ref": "indicator--fc8dc4d7-1f49-4888-b4b1-c443b88e7ab7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b686fd0-8e32-425c-903c-8c8bf315fcd8", "sighting_of_ref": "indicator--b9eee193-0a21-4881-b618-f2e441c27f61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500921db-68c5-48d8-952a-b8cdc3d6a64a", "sighting_of_ref": "indicator--cdc8c6b4-1bd0-4945-b6ee-5def30b19506", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3414ee50-3612-405f-b028-6ead5e26a629", "sighting_of_ref": "indicator--bf414f3c-60dc-4926-b18b-d22240d7ea17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae75a150-29f0-4e14-84f5-c4d07c4e8b06", "sighting_of_ref": "indicator--21a30bfc-9bb3-4ed4-aeb9-b1bc00625540", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af2a9ba-c609-4e47-a873-4b70ce5e0ef6", "sighting_of_ref": "indicator--923ef960-8707-4ecf-8c0c-5107e61fd313", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7302deb-3cd9-4972-95ff-8e6676f008b0", "sighting_of_ref": "indicator--4662b8db-d577-4120-9555-3a17a028f49f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248e1ff2-6063-497b-a8d3-70158f043a32", "sighting_of_ref": "indicator--c75ca4dd-a9a0-44dd-a4d4-75eaeaaf07e7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc89483-4fb1-4a3e-a635-f7496f988693", "sighting_of_ref": "indicator--9248f6f0-6f91-45a8-ac36-7e0b0a642d9c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eb8578-5374-47dd-a523-33d028ac4082", "sighting_of_ref": "indicator--bbf98c65-765b-4481-9df9-aa1049030f12", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fab443-39d9-4f69-bfc8-5fb8f65f39b0", "sighting_of_ref": "indicator--787d7286-edc6-4e14-ba80-f3da307e5451", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f767571-5e35-409f-a3d4-6632945536f6", "sighting_of_ref": "indicator--16a9eb98-b77b-4c0b-a7cc-7c214f4cf4ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b87a2b1-59d5-4cbd-b34d-2469682f662f", "sighting_of_ref": "indicator--efd2bf08-f43d-42f8-888e-be246b2c840c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c505871a-7527-4756-825f-a5ed6248e2c5", "sighting_of_ref": "indicator--739f61f7-0d6b-4f75-b8ec-5b447293f0b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0070800-a660-47d0-9cbe-94a9bce2a571", "sighting_of_ref": "indicator--423860db-2d98-42f5-87df-2ca3f836cb0c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20ff155-b7fc-4f57-9f2a-c15a371a31db", "sighting_of_ref": "indicator--c1f9db72-abd5-435f-93ef-74b8b2681511", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29836cc2-ca8c-43d3-874f-06bf87b6ac61", "sighting_of_ref": "indicator--814955a9-7c64-466e-bad0-b4f46518386c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b8b710-3eff-4677-bf68-87882c842675", "sighting_of_ref": "indicator--a393ffd1-b3c1-4aa1-a128-10cf6a9a1407", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8beb83-1900-4ae2-a512-ea12bca88fdd", "sighting_of_ref": "indicator--0d5d39de-c415-4662-9a18-19ff10f772fb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8364e2-7525-4011-a85f-60b5111c4553", "sighting_of_ref": "indicator--b7dff1e0-1c4e-44fe-be4c-0d5d5ccd1bd1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f34b8c2-9cea-43f5-9230-23ba73d9f3ab", "sighting_of_ref": "indicator--876a792a-b989-4010-8fc1-1ee152a24931", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18da0bdf-755e-4e47-a38a-13e1bbbd3826", "sighting_of_ref": "indicator--ab56a0c7-1fad-434d-9b14-ed698a1eb52a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca81dea-7568-4839-8c41-5a1c87446fb8", "sighting_of_ref": "indicator--80862c45-2a7d-4c84-a114-3481929e34f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999bf3f7-d680-48a4-a3d0-ef8dc0e7c342", "sighting_of_ref": "indicator--289428d1-6073-4cc6-82ae-f6b1f5f752e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9970dbf-06c4-4f6d-b40a-a67673216f89", "sighting_of_ref": "indicator--3f3cd2b2-8ff3-4122-ba01-e4dfa3d20613", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05477f5-a682-4c0b-912c-bb92c4a90bf2", "sighting_of_ref": "indicator--f43a7ec1-1157-41cf-9182-9f5342cf2c7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dd4e14-3633-4c74-8f8f-b545427cc37e", "sighting_of_ref": "indicator--97985ac3-5615-49d6-8dcc-13c47ce46f87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a80581-9aa7-4115-bf05-e09a9a2f2b37", "sighting_of_ref": "indicator--967b18af-c166-4fd9-bee1-df9a74958394", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee70d75-5cd9-4929-9336-ea86f046b7b5", "sighting_of_ref": "indicator--ee8fe9d1-6375-4659-a39d-ccec1c028c17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b83482-2666-4822-83fa-f5b24d825423", "sighting_of_ref": "indicator--640f1071-4ddc-4cb2-a43f-8ee45c84e050", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab122f4-15b7-4697-9548-935f976abfaa", "sighting_of_ref": "indicator--129b4ffa-af9b-4f1c-8dd2-bb7e470ab832", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b086393c-275e-483c-a3c2-156580f2eedd", "sighting_of_ref": "indicator--33d79f1a-365d-43f0-9f0a-3dd779dd3a42", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f920aa1a-45e4-4b50-ace9-1d0d1c5a0e23", "sighting_of_ref": "indicator--1da4eb5a-e823-4d27-a6bb-d7090d56470a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caae2d5e-9b55-41d6-a97b-99af52595e1c", "sighting_of_ref": "indicator--317836ff-131b-4c2b-9514-7ebcd01d9f7f", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae81d29-287b-484a-bcb3-947c962c0a79", "sighting_of_ref": "indicator--e1dec842-73ee-4579-bde1-7c77d473eb7d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1aa6af-beb8-4bb5-9c3f-1144d639f483", "sighting_of_ref": "indicator--82865ae8-2565-4d12-9891-c947daf3776e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e9fffc-a855-4ef4-a347-7f9a1c78ac8b", "sighting_of_ref": "indicator--946cc4fb-eb48-4781-ae9b-071b66b05efe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e580b511-fa67-4e79-b36f-11d90ededd99", "sighting_of_ref": "indicator--27695a86-a018-41cc-b1a7-76b18525fdef", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99f91c8-49ea-4f66-9955-f02cb6a333c3", "sighting_of_ref": "indicator--7545a0fc-b3c5-49d4-b106-72150ce16aaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1650d8-4454-479f-bb10-04794e1be8aa", "sighting_of_ref": "indicator--3921af93-ca96-4a84-904f-c8d9d89f40e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8262ebd4-134f-4fa0-bdd3-71868f7aaca6", "sighting_of_ref": "indicator--4d7ca00f-827a-4624-8c01-32f30d146873", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea79acc-02af-4032-af3c-d0fcdf315f87", "sighting_of_ref": "indicator--5c42e4b2-4c7d-48b1-bad1-76e4368f8c9d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786d1cbd-b56d-4a1f-a65e-1fa45ad7a87c", "sighting_of_ref": "indicator--6794c711-4cf1-4a1f-ab91-ddf625fc1dbe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a62d777-c2ea-420d-aabf-fa68ba7a7a46", "sighting_of_ref": "indicator--ae50cd88-5090-4a72-a26a-1e89a9ed2b2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6efae2-4496-49e2-8b54-41fd6618b9ed", "sighting_of_ref": "indicator--ae50cd88-5090-4a72-a26a-1e89a9ed2b2a", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96373a-5f50-425b-9792-e79440c4c767", "sighting_of_ref": "indicator--0f1b2749-1fad-46c0-a9c0-4bb5ece3b9a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e096f-5458-4e96-a6b7-4228f6d00e5c", "sighting_of_ref": "indicator--0f1b2749-1fad-46c0-a9c0-4bb5ece3b9a3", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522cfbaa-aa0f-414d-919e-a2939c0edc9a", "sighting_of_ref": "indicator--7d8fbe2c-2d94-49f2-8166-e6f79ac84443", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b0e30d-c016-4c72-bae3-f38ac7a3ec28", "sighting_of_ref": "indicator--288ebf56-4cc6-4cd7-84e6-e934d4056db0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15859f62-2d5e-4f18-aac4-6d4e8316f6fa", "sighting_of_ref": "indicator--288ebf56-4cc6-4cd7-84e6-e934d4056db0", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72309011-959c-4287-99ae-59d09d0e1496", "sighting_of_ref": "indicator--cbfc6147-5564-4169-83a7-7510dc7508a8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d8f29f-6061-4a7c-b5dd-1d509a8b1464", "sighting_of_ref": "indicator--cbfc6147-5564-4169-83a7-7510dc7508a8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15da5284-1363-4c26-a187-ccafd78b157c", "sighting_of_ref": "indicator--cbfc6147-5564-4169-83a7-7510dc7508a8", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42895298-35a5-4701-990c-03e0595993b3", "sighting_of_ref": "indicator--8b0be92a-8e73-447b-b9b7-1ad4ced866a1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a96dc02-3aa9-4362-bfb4-1bc16a839c6c", "sighting_of_ref": "indicator--834d828b-cb4c-4aef-b258-476add9bfb2b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37f5142-b7c7-4652-a62d-221fc5554b8b", "sighting_of_ref": "indicator--834d828b-cb4c-4aef-b258-476add9bfb2b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2fc0df-a103-4630-9a9d-05f3a278df10", "sighting_of_ref": "indicator--834d828b-cb4c-4aef-b258-476add9bfb2b", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df88c906-79ca-4bc8-96e1-3a1f027299e6", "sighting_of_ref": "indicator--c33243e6-f511-444a-ae8c-1da57ff17821", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b15267-9154-4ae8-aa6f-92f45bdd7b02", "sighting_of_ref": "indicator--c33243e6-f511-444a-ae8c-1da57ff17821", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee3cb0c-29dd-40d0-a51c-2352f3e0fa6c", "sighting_of_ref": "indicator--d2f66636-f1a7-4214-9a91-f10b7b264f30", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18713848-7f0e-4b56-a8ab-f982f63c0c22", "sighting_of_ref": "indicator--78673cf7-ac4e-4109-bf69-1c0942208154", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a072e84-353c-4b98-b122-c26384d3b219", "sighting_of_ref": "indicator--78673cf7-ac4e-4109-bf69-1c0942208154", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc8681e-195e-47b2-8670-7cb2fc31274f", "sighting_of_ref": "indicator--df013b17-c632-4165-968f-b37ec377363d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a985f73-8c1e-4788-98a6-7e101cecd051", "sighting_of_ref": "indicator--15926366-b580-4b85-aeda-826ce621773c", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4a6d66-6a0d-48a4-8cee-ed912da019ac", "sighting_of_ref": "indicator--15926366-b580-4b85-aeda-826ce621773c", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2033362-b515-4a52-bd8e-d6cda426ea23", "sighting_of_ref": "indicator--15926366-b580-4b85-aeda-826ce621773c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa455aa4-8529-40d3-9e7e-500093e56aa3", "sighting_of_ref": "indicator--15926366-b580-4b85-aeda-826ce621773c", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1929d62-468e-41c5-9af2-89548fe4699a", "sighting_of_ref": "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048a6a63-d54c-4789-b006-0d9e08d11957", "sighting_of_ref": "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388ff4a8-bc7a-4d7a-acca-cd9ed291d899", "sighting_of_ref": "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec9149-b0b2-4c8e-9486-117f689ae6d6", "sighting_of_ref": "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee56dd7-4c52-4776-82b0-d8b41230c363", "sighting_of_ref": "indicator--5abb71c5-abc7-4e1e-911f-de1d8e092fe2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41150252-11aa-49b5-8d4f-be92d6a3a48d", "sighting_of_ref": "indicator--42fc6f2f-ec49-4d88-9197-a1c6cecc522e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ccb214-538d-4416-8cd0-2c90c8fef6c6", "sighting_of_ref": "indicator--a2a69de9-eff8-414d-b5f0-0d2b7a776bf6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f3e9a8-77ee-48e6-98ae-e84c04f813ed", "sighting_of_ref": "indicator--1c75a9f7-ab55-48ec-9d8d-6e1bf33347a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12de2154-ee5b-40d7-a74d-4ad850735da5", "sighting_of_ref": "indicator--f039ca91-c4c3-4809-9432-8c4887ea08f8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a554d3c-49a4-40f8-a76d-b2dbeea46d38", "sighting_of_ref": "indicator--48c888b9-d987-4589-bcb9-3c6659e3c49c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb06793-c5fb-463b-a59b-25d37f77bc3d", "sighting_of_ref": "indicator--e09ee81b-d668-4e4a-a5a0-8e1c12af4080", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d0cb21-dd8c-422b-8f3a-51c1c9de6206", "sighting_of_ref": "indicator--7ef08355-cb33-4a35-a86b-46b348d94442", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf6822-d0ea-47ef-a2e4-d4157dd7c454", "sighting_of_ref": "indicator--8016f7d6-a98d-4af1-89b1-50fb9aba9ecb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dfd48d-867a-4a07-814c-e54f92ae0027", "sighting_of_ref": "indicator--6fa13bc2-ea18-4d83-aaa3-5d224ef51cf8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7708fd21-8e59-469b-91f9-e8d84a80c055", "sighting_of_ref": "indicator--9732d442-39e9-4334-b798-035fb6c3a767", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b2a04b-40cd-4e67-8401-b38003e54b7d", "sighting_of_ref": "indicator--d33c5d78-1d6f-4de2-a628-6dfc83d65837", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b68372b-26e9-4e47-98ee-86c306603b1a", "sighting_of_ref": "indicator--2e8bb40c-35f4-46fa-9955-dcbe349349ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac9c8df-36f3-4d41-8554-d85cabb349d0", "sighting_of_ref": "indicator--02e329de-1cb1-4d89-b9f3-84ce0bd7ef0c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75115574-f814-43db-946b-9e4761dead49", "sighting_of_ref": "indicator--d832915d-7206-49e2-b921-80cb6b7188b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850fee2c-0dc8-43b7-900a-8652e0498871", "sighting_of_ref": "indicator--649266a2-f009-40ad-9330-a88241b57d83", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302d3470-44bd-409f-9b27-3a2fa9f9332f", "sighting_of_ref": "indicator--9364aaa8-b6e0-4dd9-9720-9bbd091b46f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4b16ef-935a-41f3-95fe-643ebb8602f9", "sighting_of_ref": "indicator--50d4dfb9-be7c-4919-b007-077c9207276d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f71ad8-da6c-412c-aafc-b2ae7ec84c1f", "sighting_of_ref": "indicator--ef51fac8-a74b-43b0-a348-4c229983906b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1234300b-b936-4553-b68f-af9c999c2af9", "sighting_of_ref": "indicator--a8a74a4a-ed70-442a-9476-d9a98df544ba", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fc356f-2802-4f17-8a16-31c94b3b5c2b", "sighting_of_ref": "indicator--9be8cca9-d0ea-4316-a93f-828cb2da111d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d56a22-1bce-4162-b77c-400c81f9cad5", "sighting_of_ref": "indicator--b68b8f75-11b4-4f25-8aa2-28ad95990b17", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d276b2-12a2-4e66-8fc3-306b103e3bee", "sighting_of_ref": "indicator--e25bd9a0-20e5-4847-bd2d-d2b97c449f59", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b3526-fbd9-49a8-9749-1524031a6baf", "sighting_of_ref": "indicator--e45c4b0d-0aed-4b2b-8d13-fe5cd3834207", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654ba3ed-1f2f-494d-8b54-c0fe215ea37a", "sighting_of_ref": "indicator--be1215a1-8b90-4f22-905b-56e00231999f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302522fd-97d6-475d-be05-9f822648015b", "sighting_of_ref": "indicator--5b6af8cf-a62a-4b91-8dbe-33c27f08b13e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f4417a-ee84-4aa5-b9e5-010b7abf81af", "sighting_of_ref": "indicator--ff157329-d2ce-4fc0-b7b5-d6b1623153f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97a447c-27c6-4429-90a3-1a6d1967b05b", "sighting_of_ref": "indicator--c3852cf1-b619-436c-8a20-c594110f940f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56c2f68-05c6-44a3-851a-266b905fd92c", "sighting_of_ref": "indicator--60d53484-f690-447b-b229-3c387b943328", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a948dab-0110-4c66-b201-67a9443a9977", "sighting_of_ref": "indicator--6409ddc3-432d-4831-8a36-cc325ae00ae2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602632d8-fb91-416e-955f-7762624a28c2", "sighting_of_ref": "indicator--0d76d446-860d-4692-ad60-426f6f49ba4b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4b83e5-cd55-4c4b-9f78-2673875e55c1", "sighting_of_ref": "indicator--e6ca3770-5b3c-46b8-9e13-c2e722319226", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09379bd8-9790-4a5c-92a7-97d4e210cc14", "sighting_of_ref": "indicator--4ab5f4b5-1a26-4611-94fe-1d384ddc1c86", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958a1aad-282e-4987-b54b-7488218bc090", "sighting_of_ref": "indicator--a923bd15-bfe3-46a8-b38a-1d2f3951228c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80eed0c-3a41-48bf-bcd6-52552820ad12", "sighting_of_ref": "indicator--d23914c9-aeda-4246-a7d1-ad3af95225e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9453134f-3599-4471-b694-5e9acefaa89c", "sighting_of_ref": "indicator--c31ea5c9-f4af-47b6-8d13-12faff71292e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee61792-bf68-4091-ad58-de0eceb64f66", "sighting_of_ref": "indicator--20e59d51-3f14-491b-8bb1-d2f22f46d958", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faced8ed-b068-4321-8e52-d914cb2bb0d6", "sighting_of_ref": "indicator--b28e3e5a-00fd-40e1-bd1c-79dab24cc92a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6d99a0-5cf2-4c2b-ab8a-3b4ff43c4996", "sighting_of_ref": "indicator--2152a182-6b76-4975-8803-2824656f6e43", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb273cb-a3f4-4e48-a0e4-107ca47470d2", "sighting_of_ref": "indicator--a017470d-c320-49c4-bae0-3fab21926ac8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de0df53-75bf-4da3-ad0c-a567564b9130", "sighting_of_ref": "indicator--bde6c6f1-8ae4-479b-9f50-73fba4982253", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bdebf7-6cf3-45eb-82ad-08ff96dadd79", "sighting_of_ref": "indicator--82d774f2-59b7-46a0-95ae-ecae1a500251", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac47257-fbac-464d-91f8-adc778f9e700", "sighting_of_ref": "indicator--676b3664-d209-4111-bcee-97c5dbd4fe43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf6d25c-c5fe-492c-a89a-fc5d628aec97", "sighting_of_ref": "indicator--6267ac0d-d0e7-4bfd-85b8-d91e6ecb7ab0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3223a7-9430-45ff-94d7-a47303ad32a8", "sighting_of_ref": "indicator--d6e8beff-35ca-4f43-ab11-e7acd2957cd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6b7958-335f-400c-a376-865027eaeb77", "sighting_of_ref": "indicator--3838573f-2b84-499a-ade4-57451acba19f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2869de91-4b1c-420b-bf01-cf878583a458", "sighting_of_ref": "indicator--a1be41cb-2d97-4899-ac3f-e22e67d864dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f32487-77e3-4390-b798-6b0ed499eb8f", "sighting_of_ref": "indicator--09d06fec-8f92-4084-9f7f-2d4869ae6eb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be1beb7-5349-4fff-a819-c8f69352a6ed", "sighting_of_ref": "indicator--32be650f-f6a4-4ddb-9d7d-ec9faac82682", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9755f4-88e4-4f5e-810c-8b9900ae09dc", "sighting_of_ref": "indicator--97692e4a-b6f1-4e1c-806f-31c9b22f4f34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf8520b-0b6f-45aa-9dad-e379ef0102bc", "sighting_of_ref": "indicator--fca2fd5d-e9bc-43c2-9c2f-2b16e95efade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9e44b0-489c-4fc0-b424-1046ad5a8390", "sighting_of_ref": "indicator--49695638-f47b-41b9-97ae-978adac0bdb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88aae247-3a4d-4d39-a5b3-e0d330b36f98", "sighting_of_ref": "indicator--52dc2ded-d155-4453-b594-0863abea311e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7e1d6f-d657-4c04-bc9f-b6f56d492228", "sighting_of_ref": "indicator--b10e2d27-59f8-494f-90e4-2e10e40a9c70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d59731-6931-49d8-8ac5-aed158e59699", "sighting_of_ref": "indicator--ee02db19-f3f6-4e56-a46d-8c49572a8dea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9ee6ae-e288-483a-ba69-411b7b056bc1", "sighting_of_ref": "indicator--42edfd39-f496-48dd-8bb4-88cad4f967ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a599c3c8-217f-4d7d-9915-d45b95745a03", "sighting_of_ref": "indicator--4e86d968-394f-4fd3-846b-76a74b96a2d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb173a-f65b-4dfc-952a-6ed1bb1a9322", "sighting_of_ref": "indicator--228456fc-2ca9-4d09-8198-fe0fb7da9de7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2897f1-1307-4955-8538-437b3f921724", "sighting_of_ref": "indicator--822bf037-2d14-42b5-93e0-172220bf6668", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc3251a-0dd7-4d71-b733-2e82a516d6b1", "sighting_of_ref": "indicator--7491da2f-6fbc-4e0f-af11-c131cf85107a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddfea41-c8d5-42ec-8ac9-09190d8ed446", "sighting_of_ref": "indicator--435800cb-f660-4aca-8db7-a229d890c9c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7033ec3d-1335-4691-93e1-e541830f20cf", "sighting_of_ref": "indicator--d2422b75-faba-4a5b-9596-f9c80bb956d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f410039-69e7-401a-9b37-662219aed5b8", "sighting_of_ref": "indicator--73e34efc-5973-4b9c-b18e-ce8162f513b7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1add3d68-2565-42ad-82d3-fad5fb298a4a", "sighting_of_ref": "indicator--77711730-a7cc-43d3-9279-391cf202e510", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a61e0b-8aac-411b-8f31-eccfbfd94e6e", "sighting_of_ref": "indicator--f557649a-30a5-4c20-81fb-0dd4b1e914ab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817900d1-1ade-4cd2-b6fc-a0028752aeb6", "sighting_of_ref": "indicator--494b6685-600d-48f5-8a26-7e320e547ce3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d4511e-055e-4966-871e-5e125e877a93", "sighting_of_ref": "indicator--74fbda10-3f32-4e74-b49b-d5db10e37dbc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07934e0a-df2f-46d0-b294-fe35939fb956", "sighting_of_ref": "indicator--347afa20-6861-4700-a3b1-8d174dd710e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe411ab-93eb-40aa-844c-c8de9373fd80", "sighting_of_ref": "indicator--dc88fb94-fccd-49f4-b552-99cebf5502b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0de488-f666-4b3b-9771-f2cdc0be38c2", "sighting_of_ref": "indicator--d858b85d-0feb-4229-a323-c658d3647ff7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be81a7-a5cc-4bda-a8c3-e130788ea40f", "sighting_of_ref": "indicator--ed9d7f55-e9b3-4ff2-b88f-df055ef02162", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b77179-1849-472a-9c81-b292561e67ba", "sighting_of_ref": "indicator--38cb8bcd-0b92-4513-a9fd-813896ec355a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b79d63b-c479-4058-b219-e14ace02c847", "sighting_of_ref": "indicator--dd9b1a6c-fbe3-42cb-8710-7d58ff755297", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b28511f-6dc1-423e-a397-36abff887269", "sighting_of_ref": "indicator--8cafa35a-8007-42f2-81d9-f74ac560af5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a99ffb-32d1-4002-877b-d9308ea5401b", "sighting_of_ref": "indicator--4112c3fb-4f0a-4b41-bf84-11b0c13c5398", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b8e3ed-f2ad-49c2-a60a-984b4e23b624", "sighting_of_ref": "indicator--a0ce9acd-e7ce-4ee6-9ea9-0ace76a3305d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010ebfa5-959e-46ac-98f6-a67e5b8cd473", "sighting_of_ref": "indicator--2094a5e5-e2ff-42b3-a3c4-1e7926c845da", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ae4056-e31e-4b19-9304-1d5947ed6e4a", "sighting_of_ref": "indicator--e1447a8e-72fa-4627-b624-f2ef3d3efc75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdb08b1-48f2-460f-bd26-ffede21a3733", "sighting_of_ref": "indicator--a2e852fd-8cb1-4683-b33b-9d69ced47651", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e0d1bd-a6be-4a85-9bc7-234d86d05024", "sighting_of_ref": "indicator--86bb05ad-b74a-41b4-8e6a-2ce4c4ad1e54", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3b9160-a920-4d93-a5ef-3dbb297070cc", "sighting_of_ref": "indicator--f17a0683-0280-475b-9a13-53ad6b64c5a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e359020f-60f8-421b-b37d-a26aa96ab243", "sighting_of_ref": "indicator--da60b588-b194-4d89-aa78-e8ade713f1f7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d87e0f-ee13-414e-bf1c-36ad5fbf63ce", "sighting_of_ref": "indicator--47439fd9-58c5-41cd-af48-16611a4d7bf6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab9bdfd-b8da-4a95-9aa1-bb90ec1af227", "sighting_of_ref": "indicator--1b145333-d97f-4799-b833-e3ff2ed19b30", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419189ae-7675-4aea-b73c-e87b8c082603", "sighting_of_ref": "indicator--dfe4a88f-1e4a-4cc5-abf5-87da62421f62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3750c3d-5b7f-40bc-b44e-0bda67bcc4e8", "sighting_of_ref": "indicator--91b4e94b-36a7-4160-8544-2af13fb135a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c48447c-ebe7-4d0d-81f2-9d60ec71d9d5", "sighting_of_ref": "indicator--86da853f-31c8-4dcd-b0e5-0137231a50f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dd04c6-c241-4ab6-9dd5-319be70d98e2", "sighting_of_ref": "indicator--295fdf7f-d2c7-4e30-991a-6cdf9afda17d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cf381e-3795-4c81-bb4b-5144e4c9d077", "sighting_of_ref": "indicator--3e52fa80-a3a9-4bac-a3f5-73c0af3963d5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189e4058-501e-4d89-915b-2261925f14f1", "sighting_of_ref": "indicator--77bb4bb4-770f-4bed-8d7d-807ad5a616ee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7642da2c-f0f8-4dd7-985b-3fdb6ef71374", "sighting_of_ref": "indicator--8f63461d-c585-43a1-b7f5-032ae346ba7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6c6660-5a33-4f44-8875-97f1256ce0f0", "sighting_of_ref": "indicator--ef554f6d-ce98-430f-961c-8c019120f013", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe88725f-4072-4d7e-b677-bd21cabedef7", "sighting_of_ref": "indicator--e30c299a-22bb-4794-8d68-8658946020d7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d5cea0-f904-4599-af81-1c5364ec51be", "sighting_of_ref": "indicator--f1ea6334-4496-4ebf-b817-c59e8d95886d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b144055c-fbc8-4e7f-bf92-02f28bda3685", "sighting_of_ref": "indicator--daad9af6-8073-41fd-b390-60a0def9c0d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd52ee0-697a-405d-be8f-2e722d7903d7", "sighting_of_ref": "indicator--24e1f78a-3266-4b82-85df-5ce99b8df63d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee923e5-a04f-41a0-8a1d-37b6367347ae", "sighting_of_ref": "indicator--938d36d9-facf-42e6-a245-145a6875d918", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afee5d2-016f-4eae-936b-49286b484714", "sighting_of_ref": "indicator--04586405-8656-4b5d-92fd-5ec44a2232ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ff8f2-607b-4607-b120-736ec2b40489", "sighting_of_ref": "indicator--4d8db63c-4167-42aa-aab0-b9ba0d05a642", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27d978a-b64a-4def-b0c9-1d8f797a50fd", "sighting_of_ref": "indicator--e256c6c7-62b3-4f35-bfc7-06b18283c778", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd28b7e-95c5-4028-97c1-9d9c79b34b93", "sighting_of_ref": "indicator--0f93ef17-f330-43e9-8227-bc080250dec3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d00b68-545f-419c-babe-905b2cc7aea7", "sighting_of_ref": "indicator--ca58e259-0381-4d23-a903-52e521a847a3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f7c594-4f21-4a81-badf-0516f070287a", "sighting_of_ref": "indicator--31067096-093a-4e25-9f1d-131ae258512e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e185764f-5070-4617-87c8-ce019440f0b7", "sighting_of_ref": "indicator--720e9258-c952-4f7f-8cae-39545789ce3c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548a3ef8-5976-4b8d-a483-962dd116a211", "sighting_of_ref": "indicator--2c0ff696-2445-4215-a576-de817b0ff9f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c5130-e7ea-4379-8ba7-f7e48b1b297f", "sighting_of_ref": "indicator--a2ca8c18-e10a-430e-8db8-59da6be01d28", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab1bfef-cfd7-40fb-931c-c6a970ef4cce", "sighting_of_ref": "indicator--e0caba09-2c2d-4a94-bb5b-ea4b3a235300", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb84c39-7a33-4d05-93e0-a95f4c1a88e1", "sighting_of_ref": "indicator--b22d42bf-c13e-4a8d-878a-770872b076cb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c06727-c1da-400a-83d5-92648f775c06", "sighting_of_ref": "indicator--b48216a7-c0e0-4357-b892-6126d8b2ec23", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264e275d-b04b-4e54-b2b7-bd3cf4f3344d", "sighting_of_ref": "indicator--5d81c7d2-db98-40e0-9756-f2b247f31aab", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f9c80c-5b63-458c-a837-9a834a502230", "sighting_of_ref": "indicator--27b2a1b1-f272-43a5-9fd0-360cec363ae6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af30f6b-8ff3-4857-b467-8376390fc55e", "sighting_of_ref": "indicator--4ec5bc13-89ce-4b52-abef-ee820f8f04ad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c7a97c-fda2-494d-b97b-2a7fc081111b", "sighting_of_ref": "indicator--0349135d-0420-4959-8f2f-971986b12e2a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a5c7be-43d2-4f42-a848-6885851529ba", "sighting_of_ref": "indicator--5d4ae3eb-d787-4550-a377-748d3ce5b18e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f76f4-5652-42b8-9461-4836acc2f709", "sighting_of_ref": "indicator--17e7f1ca-dc00-4439-8f9c-3394d7746da5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0917f6e7-8872-4958-aab7-4474ac219d7d", "sighting_of_ref": "indicator--d4260c3b-d840-4b19-9074-4d9ea07d81c8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d0011b-1e9e-402b-98c6-68a03aa07d31", "sighting_of_ref": "indicator--521760fe-219c-4c2e-8eba-217d4f6c390d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6168cc-069a-4ac1-b743-169cd7a70c45", "sighting_of_ref": "indicator--56973c60-0771-46b2-a320-b7d6ad07fa7b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2ba233-55e0-457f-b6b7-e9660ac95edd", "sighting_of_ref": "indicator--91509c49-8deb-425c-8d51-1d15e7517f15", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e142e7-3e5c-4e8e-b7fa-c1ec1fe68f08", "sighting_of_ref": "indicator--be5c9b7e-6873-491f-9a9d-f2990633d66f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a636c4c5-dbcf-42cc-8b24-641f19d88a5b", "sighting_of_ref": "indicator--0ee4f9b6-f5f7-4f4e-971b-ac7446111d75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19810e25-aa9e-4b7d-9a00-81f9bd833835", "sighting_of_ref": "indicator--7e89ca3f-e748-40f7-83db-53e199a2d8ed", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607ce5aa-b7ac-458d-a1fc-ed59334111da", "sighting_of_ref": "indicator--66ca812c-17b9-4275-81e5-19931ce57b50", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149bdbf7-a0b1-4459-aac0-2287f55316ee", "sighting_of_ref": "indicator--e86cd366-fd35-4dfa-8895-304b516d129e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd5af3a-9154-476d-978a-f6a79e9aa2c8", "sighting_of_ref": "indicator--cc5ca465-3f63-4c5c-8d56-52229709b5fe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2daf590-e458-45ef-af4d-4bd9f4f8e1f8", "sighting_of_ref": "indicator--fbbc19af-9040-4dcc-a28f-cd04747bcfd3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e686f9e4-18d7-4889-b587-b75a01a59a19", "sighting_of_ref": "indicator--7d70441b-c810-4908-903c-fd37486f5bbf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a10c0d5-f89d-4af4-a6fa-8246de358962", "sighting_of_ref": "indicator--79b48466-5c77-4621-ad74-80052c94d3ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d6479e-8601-43e3-bdd6-d87b60e8fda2", "sighting_of_ref": "indicator--0a0e44f3-df01-433e-a0f7-8b45ab010a25", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d220bca-1160-4bd6-b599-8066defe22f4", "sighting_of_ref": "indicator--ffffe6f1-7f51-433f-84db-931cedbaaa8c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63602362-3c4b-44e1-a207-49fde336977d", "sighting_of_ref": "indicator--e60ec1ef-a876-484b-aefa-a7dd5e96a94a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2453a1-7926-408e-961c-138f3b33a37b", "sighting_of_ref": "indicator--202959ef-a11b-4937-9ed7-40da9cfb003b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26b5c01-6e8b-4ac1-969a-feda1a3272ca", "sighting_of_ref": "indicator--fe09b11e-211c-4b23-bfc0-ac0b2eb7075f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd61a922-5e18-43b8-8086-a80d92294249", "sighting_of_ref": "indicator--a7d151b0-1edf-40e5-885e-5a791555f3e0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3649243c-6f6b-43a2-874b-0ff0cfc118db", "sighting_of_ref": "indicator--4554b5e1-7e55-48ae-824a-ba78f405921f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589b0dae-e375-4acd-820b-fc7c0b87338a", "sighting_of_ref": "indicator--ba96074e-d3da-4a21-96e7-5ef3ddde354b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e14106-1b06-4b96-9f62-0c65b5ff5a3f", "sighting_of_ref": "indicator--2ecf7231-2030-413c-a0eb-064fb8f88886", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629c277c-34ac-4ee5-b467-4b50caf71f75", "sighting_of_ref": "indicator--f65e7755-9f34-4a89-88c9-b9270b08e258", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddd6ff5-a38b-456b-8819-f03ec4586c3c", "sighting_of_ref": "indicator--889b86fb-5156-481e-838d-065b1a885f2c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60101d9b-6f6f-43cd-8779-7992dc0cbc0b", "sighting_of_ref": "indicator--531f73c0-448b-4345-82b3-1d6e21909946", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645b755a-9f81-4377-bd16-0bb1db5320d4", "sighting_of_ref": "indicator--dd543bef-388f-481b-bb6a-11e36a62f7f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e811e9-9af8-4465-aa16-62122f30d149", "sighting_of_ref": "indicator--fe226404-9f5d-4323-9c6f-5b28944de06e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fd6ba4-472c-4373-b476-6ba4e2e3e7af", "sighting_of_ref": "indicator--d250aac9-3b5c-4958-8fc0-2fd2c3c859a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643ccd69-fb6b-4767-854d-e66975bc1c11", "sighting_of_ref": "indicator--f5d787c3-a5b2-4dff-b366-80e945e43873", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2e314f-1b90-498b-8c79-e5f71442f720", "sighting_of_ref": "indicator--f93d7309-aa96-46e2-9f1e-971681924793", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b05ff6-2617-4d8f-b952-cc6af93814d1", "sighting_of_ref": "indicator--c517ef38-2ab3-42fb-b1fe-b266342581a6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9921ac-19bb-444b-a4fc-be2b13a3444c", "sighting_of_ref": "indicator--e2a44c9a-4000-4e15-b35e-4c4daff37339", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63a7cd8-052e-45cc-8296-2c8eb5b3f20f", "sighting_of_ref": "indicator--9462140a-5ad8-44e1-9c80-f2b30282b8cf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8217585a-16ae-41b4-b2ca-ee6d915c7df1", "sighting_of_ref": "indicator--91d18acb-f637-4545-afb0-79a9c3f98669", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8af786-4146-4b42-ab87-0839f8e19a7c", "sighting_of_ref": "indicator--b5393fef-6703-45c4-875b-06de25df417b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe1810f-0a9f-4633-a389-50cd945b0a16", "sighting_of_ref": "indicator--740f1b39-1f5a-48b0-9f99-04323848d1a2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc2e2d4-b358-4e39-8a13-aed38a8d197c", "sighting_of_ref": "indicator--87712599-5e72-40fa-92f3-7b9784d83c0f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bcb044-a84d-45a0-961e-8b56ab80a1cc", "sighting_of_ref": "indicator--7ffa7af2-945b-4974-ad6a-1ddff962447d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82d3ac5-75d1-4b7b-b400-4cb1123bac52", "sighting_of_ref": "indicator--b09c2274-314f-43ca-aa10-0c436d8e6e62", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7aa682-a8e5-4661-a250-280ff9b930bf", "sighting_of_ref": "indicator--8e9b4205-1646-4ed7-94db-b700aa3dfb14", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95565388-c8d0-4611-b608-6ffb80b3564d", "sighting_of_ref": "indicator--1350d3bd-de0d-424d-bd55-33641a7dee8f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb7e826-fe2a-4b3d-8e55-745c8a9bccb7", "sighting_of_ref": "indicator--80d27b26-7a3a-40d5-a4df-d390e64a93e5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0d0983-22d3-46fb-a2ab-136b2e5e86d5", "sighting_of_ref": "indicator--81ab441f-e3a8-43d8-b229-f0becd2b8006", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4da1cea-393d-4b01-a1e7-ded7b2d1b760", "sighting_of_ref": "indicator--ce5a7333-13e0-4188-8f58-f46a04086b84", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6598f7dd-313e-4eea-bcfd-982baa13792e", "sighting_of_ref": "indicator--c4e45844-e745-4698-8d7a-b17bd051a6c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f36712-0a55-4016-a9fa-8b8197b1bbf3", "sighting_of_ref": "indicator--f100d0aa-4aff-4621-8790-e3aa26a4d416", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fec873-dfdd-4916-a49b-9d726783014c", "sighting_of_ref": "indicator--17617b47-da98-486c-ac46-660060a36220", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eee67d-a65b-478b-80a4-1309138582d1", "sighting_of_ref": "indicator--4a973b51-2411-4035-8f74-af32ce37ede1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca52072-3dd6-4d1e-88f8-65f90fc938dc", "sighting_of_ref": "indicator--c3359635-88a9-4616-817e-875e2c34b5f4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b68459-51c5-458c-b2be-33e6c9a7cc88", "sighting_of_ref": "indicator--5ba2d0ca-3765-4b57-a289-0eaece8fbf22", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c61c0bb-f923-469b-bd2f-953dbeb65493", "sighting_of_ref": "indicator--a17b2b9b-ee16-4aed-b706-bf1af6188c68", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403fff30-1a70-4307-b1a9-dc0a92ce0936", "sighting_of_ref": "indicator--89e6fbeb-881a-44b4-a4a4-f8ba78b39222", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80d589d-66d8-4160-92e7-8ca20d605095", "sighting_of_ref": "indicator--06edda2b-4a11-4069-a289-3909b4bc6ae0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bee7e3-c28d-40f7-93ba-8a502e4f4d56", "sighting_of_ref": "indicator--59b1905a-a751-4ddc-9d94-052cfbf0d75b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca19495c-af00-48fc-a6f9-faf1903cea6d", "sighting_of_ref": "indicator--32dcb14c-ef76-4308-b98f-0d0170a8a207", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177fa577-6b2f-4441-8c36-9513b61d837b", "sighting_of_ref": "indicator--434934d8-6650-4344-9072-653e2a0a3fe2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903d1521-d23f-45c2-9038-675e9a944d6c", "sighting_of_ref": "indicator--6c8628ac-f226-4159-9df0-567e51b412b3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8002eba-479f-4e69-9adb-a5454b0ee7bb", "sighting_of_ref": "indicator--a10321c6-2ae7-490d-9e29-ed068a2fc35d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f5b3b-7918-4708-b40c-d1bb4bd1e3ff", "sighting_of_ref": "indicator--9ff93835-b447-4df7-bcbf-d643d095d87f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcf2403-4f17-4e2e-b1d7-2f669751198b", "sighting_of_ref": "indicator--c0d93741-42bd-4ebf-a004-a260babb5904", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955ee18c-36bb-4f19-a953-06e5d2e88850", "sighting_of_ref": "indicator--e674b295-98b8-4669-b1c5-783044f8b276", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1a5d62-9f57-4080-abd0-46f8c6547325", "sighting_of_ref": "indicator--58cd0a9f-e540-45d8-a2aa-72073c2168cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fc231d-a554-45eb-8dea-dc64dc6dd107", "sighting_of_ref": "indicator--590831d9-2fa5-41a1-9888-021c51770749", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f44c900-525d-41f2-85cf-165cc9cdb060", "sighting_of_ref": "indicator--4e5f4264-b480-4df5-8316-a42a4061b844", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc5a917-5db8-4c76-937e-799f9ed70c19", "sighting_of_ref": "indicator--ec52eddf-69ed-427f-81c1-7d98b4d91193", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0a5f13-ede9-4975-bc3e-b6a30f8f515f", "sighting_of_ref": "indicator--b205c44b-e9c4-4cdc-8eef-615ebfb12076", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef303f7-e4a5-4a35-a7e6-f38d2321613c", "sighting_of_ref": "indicator--fe258155-602b-4e43-97b8-d7c86c2d8b75", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a47689-028e-4bc5-9e94-fa3b286aab30", "sighting_of_ref": "indicator--4edb630a-0a10-4c2b-9d2b-f993da289e3e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe06a92-7a76-48a4-b3a4-50a2597afe04", "sighting_of_ref": "indicator--de7ab294-83ca-444c-aade-034512af12f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5556ce4-4bf0-49b0-8d78-ca20e947635d", "sighting_of_ref": "indicator--8582bb91-317f-40e6-808d-1b6ab2c54b18", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e64d41-b436-4742-bbcb-68158ff2c460", "sighting_of_ref": "indicator--a566474c-2694-491b-8b44-d863cb05d2f1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa07758-8003-4999-ac05-7d59834e71f8", "sighting_of_ref": "indicator--3319f39f-265d-4822-8a01-2ff99434fdaf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3acbd7-791d-40a8-a300-dfbb94dbfbcb", "sighting_of_ref": "indicator--735f3391-a279-45d3-8893-bb9b9ad66948", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b169b682-1b56-431e-b68b-f531b4d14174", "sighting_of_ref": "indicator--230b43bf-0495-4b4f-83a8-7e5feb8aebb7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8d57f7-cbe9-4e96-8c20-7245f5812957", "sighting_of_ref": "indicator--ec2c0ff6-470f-4a9f-8fc0-4d6328c839f0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9982e9d7-ec0b-412d-92a9-4fe3ebd82a17", "sighting_of_ref": "indicator--7c22e3e8-31bd-404b-85bc-68be0528bd1e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d9f472-a8fe-4148-8b0f-df013e895f6f", "sighting_of_ref": "indicator--bdceb062-220e-4473-9061-ecce44fd2747", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518d88a1-8072-43e9-a603-445be900dd26", "sighting_of_ref": "indicator--7bfa8b1d-5552-4522-85e8-1945bf16859b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa149e6-418c-44ef-9037-c084657c78b9", "sighting_of_ref": "indicator--a4445e87-8864-4fd1-b3e2-56f6c17147d9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a15fbc2-6ffc-44d8-a67b-441369953c25", "sighting_of_ref": "indicator--eb9dc0f0-180d-4300-9cb8-23468f774735", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecc4b14-815f-42ad-ad00-fd8effc5832a", "sighting_of_ref": "indicator--625b9999-e440-4dc0-9094-f6519f321b79", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b604b87f-83e1-4941-a5f3-8362513cef79", "sighting_of_ref": "indicator--75a9ed37-025a-4311-83f3-5b13e60c2144", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26125b80-250f-4564-8c3e-e695454b4100", "sighting_of_ref": "indicator--9ed0183b-be81-441e-9fb6-af1d26a16e6f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04a66f0-a79d-4201-bb99-b29f0458f99c", "sighting_of_ref": "indicator--e8e495ba-4c95-4d84-a6c2-db3bcba0e1a4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61abdc2-76a0-4cac-b942-0310213e2a38", "sighting_of_ref": "indicator--10d66586-2264-468a-8574-ad9486bed7b2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8f0e42-d951-4488-ba26-1df9ad65fe3e", "sighting_of_ref": "indicator--81bfbcde-1f34-4e04-b8d0-c70e2017c1cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1b5572-30d9-4654-b282-81afa2be8cbd", "sighting_of_ref": "indicator--dd9022f2-c07b-40e4-a7af-65f7674ed4d1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f120a9f-c40c-4e94-b52a-d5a1b75bdb40", "sighting_of_ref": "indicator--b5aa1fa5-b084-44cf-8e27-7e24bae30adc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a3869-6f0d-46bc-a55c-b9cc78d330f0", "sighting_of_ref": "indicator--d8f255f1-b83a-4f9a-bdc4-e9be748d459a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762d51a2-ad99-465d-bfff-677721d1b2eb", "sighting_of_ref": "indicator--02534257-e284-4b19-809c-6daf221fd225", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd63d33-85f7-4e6e-94e2-9ff1e9a253cb", "sighting_of_ref": "indicator--9498b0eb-a478-46df-aedb-8ec8266fe57b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8508f76-c0f6-4780-b3c8-0374180eb650", "sighting_of_ref": "indicator--116f4c6e-6798-40bd-a2be-a3dbd75c6da7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e36bcb6-733b-49ae-832b-d3411e4f4c17", "sighting_of_ref": "indicator--3b7e12e8-5b65-4858-967f-4e1460a6a03f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ed221f-5e22-480e-8b57-ffcb39b1374d", "sighting_of_ref": "indicator--53b981c0-17d1-4887-843a-57287c8d3815", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee4b873-028d-4972-a39e-7de18420bf68", "sighting_of_ref": "indicator--c886c894-6686-43cd-804c-3832cbc0ec36", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd1354a-d8c2-4151-b90a-ebcc026dfe69", "sighting_of_ref": "indicator--f687272f-0bcf-4e0d-969c-66e41da30a74", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23682483-8820-4f0c-bf1e-3a11992383a3", "sighting_of_ref": "indicator--14e068c3-25b7-4fb1-b37d-507c41433c9a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359e7bc4-648c-4c0a-9cff-08a8af658078", "sighting_of_ref": "indicator--b95bb6f8-0744-46f8-90a9-1671715c6353", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d945eb-6f35-4d30-9bdf-99245f2498aa", "sighting_of_ref": "indicator--200bc71c-cd12-421d-a899-65cca8490a26", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1707742c-7dd8-4270-a8c2-73a3fcbb724e", "sighting_of_ref": "indicator--7c747bbf-2148-4ec3-97ed-30e65c18112d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2181312-2760-49d5-b21a-13af08009e82", "sighting_of_ref": "indicator--31ac6153-bbae-4622-804d-520370b88fc6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b83b07-05ea-4aaa-8468-7b7e66bef51d", "sighting_of_ref": "indicator--208782a5-3efc-45f5-a8ff-071edbc6f04b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8515b9-a7c9-4e41-869c-cdeb68b93089", "sighting_of_ref": "indicator--38b24abb-a2b3-444d-882f-06ae05dd564b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddeba2d-4b27-4611-bf21-abf0f5ba0474", "sighting_of_ref": "indicator--356bd15a-6112-4338-b2a3-1bb41ad726b1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0255851-3ee1-4b21-945b-d6325b11277d", "sighting_of_ref": "indicator--f52fb403-1658-4ad3-9aa0-3331479df0f6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebbfbe1-b2ee-4e8b-855f-f1861a36837a", "sighting_of_ref": "indicator--9b091589-3770-4037-b3a6-385bafedd7f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa0a053-d5b8-4e66-b082-836fb3090ef0", "sighting_of_ref": "indicator--42975188-36ab-4ed8-8252-f161fd733245", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82b0d32-7c9b-4416-80d2-8ec53ea480f2", "sighting_of_ref": "indicator--8aa5deab-8267-4fb2-95c2-c2ee1428e959", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314d402b-2b07-46d7-a594-842b57bd947e", "sighting_of_ref": "indicator--cc2859b3-56b7-405b-846b-0da3a6b796f3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeb0ab2-8a96-4ce4-8842-1c1c92436de8", "sighting_of_ref": "indicator--9a2542e4-9685-4c99-b189-66c4afb075bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8108b66-3fcf-4dcb-aef9-f7cad57135b7", "sighting_of_ref": "indicator--51e439b1-7f01-4777-aff6-0e26ac10f241", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9831dc1-8709-47fd-9e64-e1c3e35b4ed9", "sighting_of_ref": "indicator--f61e2f1d-2066-4491-b6a0-275ccd7f37ca", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad946155-755d-4ac2-b1c2-f2e3d9503a8a", "sighting_of_ref": "indicator--f8950a22-424c-45a9-9011-889c01e6c806", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c3853-862b-45b0-9a85-4ccffaab316b", "sighting_of_ref": "indicator--70942ba5-bc88-4985-9e69-bb8d1b3f20a7", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d065f4-ddce-41c9-8b01-7c35ce510143", "sighting_of_ref": "indicator--672fd266-7f79-48f8-858e-42da8b8c41db", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60eeca8d-6731-4a38-840d-e6351782f405", "sighting_of_ref": "indicator--4cae9afa-9c0e-4c1a-8f69-a3b9e0746719", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245d342d-0f10-4733-a793-e8dcaa07db28", "sighting_of_ref": "indicator--59c1b8db-581a-426d-999d-340bbfbc8f19", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc057d42-f64f-47d4-bfbc-aa5963798a98", "sighting_of_ref": "indicator--abe18687-ff6a-4ffa-9512-c92f9cb5013e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5fb555-a064-4c71-874b-7934517b44bb", "sighting_of_ref": "indicator--c4e67a21-267e-4145-bc1c-056f987617c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65824c7-847d-436b-9bea-ab50a1d2b850", "sighting_of_ref": "indicator--3e073813-5484-4395-9446-90ae87c44796", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9153e85d-f2d8-465b-977e-ed544ceb31d2", "sighting_of_ref": "indicator--c4bebb12-726c-43a6-9954-15bdc5267825", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32922ba4-1ecf-4c8f-9701-f015ddede262", "sighting_of_ref": "indicator--83a5103c-c832-48b8-9c86-d14be0762866", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a751373f-8715-4f32-8a4c-79ac51d90264", "sighting_of_ref": "indicator--607635bb-893f-4262-80ac-0432ee0a22ac", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c55337-317f-4e06-98d3-d43a1102f01a", "sighting_of_ref": "indicator--ced7d73b-d094-4d55-905d-e16efacf62b5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a7f638-4ff0-4cb1-80f1-7ea4a81a019b", "sighting_of_ref": "indicator--903e49b0-9530-4c91-8d80-9986b291d807", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22a5618-90b3-4c60-814a-24fe47079497", "sighting_of_ref": "indicator--e5ef6fe2-9f3a-46d2-8269-33d88bb8122b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c94477-b9dd-4a3a-a89c-dbc3691cd28c", "sighting_of_ref": "indicator--a7d14739-a1c3-4f71-9594-f75811e61c03", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d871e983-fbb8-401b-b1f0-a5eb54b0bb64", "sighting_of_ref": "indicator--b2e63e3b-ea5e-4cb1-a02c-fb980751f7cc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93084418-e5fd-49a9-b445-48789dedbd89", "sighting_of_ref": "indicator--b37baf24-54dd-449f-bbc6-ea6b54a95e1a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47337122-a747-4ce8-9273-3cf001cd2605", "sighting_of_ref": "indicator--3bde50ab-0a68-4ec8-84ba-bf72ebf9657e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e1a93-4cbf-4c9e-b75c-c97d484d4f35", "sighting_of_ref": "indicator--e5c82c13-982e-4a95-9694-f25d82507820", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111d36a7-5ff4-4a96-b75e-1f7e2c0bedc6", "sighting_of_ref": "indicator--1d648375-1669-4f28-abfb-85c73df441aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70227ece-15dd-4880-a194-ec87ebb46e0a", "sighting_of_ref": "indicator--fb4fdedb-aa37-4607-bcaf-f59e1ffeb5a0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf927349-4ed9-4e20-8a01-7699ad6e4ff5", "sighting_of_ref": "indicator--47b3c692-fbe3-4f21-adf6-a163a872a736", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9774a326-9fc5-4836-908e-87033c15e11e", "sighting_of_ref": "indicator--36232c03-028f-4741-8c71-df0c8704719c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb9d67c-b89c-40f3-8ee6-07c79b1eab1a", "sighting_of_ref": "indicator--792923ee-1a08-4c13-b2dc-cca83e3b39ae", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c363470f-c9f0-4d68-86f1-cfe9afa5be26", "sighting_of_ref": "indicator--ec9ef842-5bca-4ebf-bd7b-8bb3fdaee8bf", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbe631a-74ad-44ff-bd9d-796c8f9d01fe", "sighting_of_ref": "indicator--2277e4c7-8a61-4ce0-80be-77a62c1a3f66", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4ede37-4d35-4044-9081-f1411c47d492", "sighting_of_ref": "indicator--c380b54e-8c81-4e66-b720-1ed18bc1f7aa", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b86fb5-992a-4bfe-b258-aa9b65cdf6e5", "sighting_of_ref": "indicator--1ba94c67-0064-4ede-8ee1-ae8b71f1b7bc", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82ce2b2-25da-40e4-97e0-d42f06922b6a", "sighting_of_ref": "indicator--48b5632d-c90e-4f5f-a3c4-7c38c32bffc0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8037c8-e8ad-40bc-beef-12a04e05cbcd", "sighting_of_ref": "indicator--c4d1f4e9-a5fc-46cc-a8bb-ed98f8e80c29", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fddd7e-a166-458a-8064-dee2c10ce313", "sighting_of_ref": "indicator--a674ff1e-1c70-434f-b6b4-f31ac3515c7c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa7fd68-6393-4099-bfd1-095b9ad07f52", "sighting_of_ref": "indicator--5e5ba4fb-29a4-46c8-94e8-2f34cd604b1e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023b7843-10b9-43d5-8fe0-913e8effb659", "sighting_of_ref": "indicator--9de1f68b-ffb5-414a-8cfd-d8c911bcd470", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1bec29-0030-40c8-9092-f077f4fb2e00", "sighting_of_ref": "indicator--14dab68f-abea-44af-ab27-b165cc5b2a13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2145aa6e-7eff-4397-a9e1-877d4349fe2d", "sighting_of_ref": "indicator--06a11af5-2986-4121-a63f-0e8da22060c3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a998b82f-889b-45e1-b1db-ec5b170188f3", "sighting_of_ref": "indicator--10cba697-78d1-437a-a6c9-85674296175a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b49b39-98b8-47e7-a673-5145877f4180", "sighting_of_ref": "indicator--3a14a9d9-ac2d-4e46-87b5-0648b0207040", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f73339b-ee87-4feb-bc10-c5846ff005e6", "sighting_of_ref": "indicator--74e0f1fe-040b-4655-8035-11c92e545a48", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d3986b-2b2e-481c-aac7-f9c1fef863e3", "sighting_of_ref": "indicator--9ca72db8-be58-4dd3-a097-3b2c683cef28", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc58b451-482e-4b35-9d19-caf6ecb040d3", "sighting_of_ref": "indicator--fc726fd9-f5cb-4a00-8eb2-1bd9db95eccb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2fc45c-33e4-4145-a5af-151749079f59", "sighting_of_ref": "indicator--6c6503e9-7365-4532-87d8-0b72ce572e9b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a30bdc-5913-4395-9ef9-3c3d28538ac3", "sighting_of_ref": "indicator--e0501911-1366-4f5f-8791-cd0871e24268", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf009bcc-7afc-4f32-9e38-69ab5a60f6ef", "sighting_of_ref": "indicator--6a5d0016-3661-41a7-bef3-9337629de096", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68380f4-ece5-460d-a035-798ec652d92d", "sighting_of_ref": "indicator--49e90417-9a92-4eea-a208-66795db4a80b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e3a98b-7c32-4967-b575-78c569b324d3", "sighting_of_ref": "indicator--c2d7c06e-6123-4f98-95c6-ca0b9af98abe", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fb085b-a354-4484-a362-e5698511619f", "sighting_of_ref": "indicator--0cdb3fa2-1625-407a-b0c8-9701b562e866", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4381395e-7fa2-4093-b488-390d7ea47d7b", "sighting_of_ref": "indicator--752f9f3b-1341-46ed-ade2-2db129a0955f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a45b44c-16d5-4066-879f-dc28f4ac817e", "sighting_of_ref": "indicator--8af32d9b-2df2-412a-b44a-69f95078080f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcf24ae-e82f-4e35-9ad3-a0f14350e779", "sighting_of_ref": "indicator--b21fd1a7-8fc4-4cd3-ba85-56a7420c75b6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76af144b-033f-487d-87ca-d8aadb42736c", "sighting_of_ref": "indicator--f61f910d-032d-4c69-bb1d-0f91116fb162", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3fcf89-fe3a-459a-9aa3-cbc04ab7324e", "sighting_of_ref": "indicator--80661f45-3866-468a-a314-caf9f1ca07e3", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd258f6-f94d-4be9-9e82-a26992faef46", "sighting_of_ref": "indicator--33a6f037-5962-45fc-9e1e-9ce172ade45d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab70a63e-8437-40ed-987a-c50d77b7b146", "sighting_of_ref": "indicator--d3f7c5d3-d8a9-494d-b6ec-5d45c571c33b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e32aaf-fbee-453b-bd3d-ac1d3a262f29", "sighting_of_ref": "indicator--18747f6b-3bf0-469b-9a7b-aa0be3564387", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8688fd98-3c9e-43dc-b319-945c8fb1a55c", "sighting_of_ref": "indicator--c3830c9f-2cf5-4f99-aa83-ef794ce07207", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725dbbc0-4482-4b5f-a8c4-3c0a23e0da6f", "sighting_of_ref": "indicator--09c44bdf-10e8-4296-8e4d-73da621b1296", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7f6e9e-3007-4ed3-bf9d-49bb9136314f", "sighting_of_ref": "indicator--0051a29c-8113-46e7-b975-18a755cff7d2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aea501-be75-493a-b7cf-21b8c1f2237c", "sighting_of_ref": "indicator--52abcea5-52d2-4f02-85cc-4c90812db9ce", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f00016d-3663-45c1-8898-c7946564be6f", "sighting_of_ref": "indicator--f0b132e3-07f7-4603-aa6d-4457b758c60a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd337999-eb33-4409-8ca7-e0b390cc7b36", "sighting_of_ref": "indicator--fd2ada85-84bc-4884-9008-7d667e19510d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f49703e-59fa-4e17-8beb-ea5e3ffed448", "sighting_of_ref": "indicator--e863d5c8-58e5-4639-bc26-b92dc8341935", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8de1e9a-497f-43b6-87f1-f8add393f25b", "sighting_of_ref": "indicator--7d024aba-d2f2-413e-bcf9-e5498959b19f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7daf73-9018-407b-ba0d-f5ad3512964f", "sighting_of_ref": "indicator--0c7b7b2d-c13a-4588-8749-d8603c755703", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fdbda1-9654-4283-97d6-9fccb550bc22", "sighting_of_ref": "indicator--e79f35a1-9787-4ef3-bd48-f34d93f12d99", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d67fe8-be18-49d4-ac61-424d41566f69", "sighting_of_ref": "indicator--2bb2ea9f-f382-4e41-90b1-2c02a2c74264", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39c302c-6f12-45b6-ac2b-7b6b217a1d88", "sighting_of_ref": "indicator--68eab767-7be9-44c9-b08b-3ea698d63944", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09438a07-1fe8-4e8d-8a8b-22b255ffa582", "sighting_of_ref": "indicator--5574559c-fdb3-47b0-a60f-47b922a4b358", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558a8831-9d02-4d58-8f6a-a7416cc00cc4", "sighting_of_ref": "indicator--1c8d9c95-8ea6-453a-b9b3-1c8820941fe9", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f365419-f741-4cad-9b1c-91de1d3781ad", "sighting_of_ref": "indicator--f33972dc-9d80-4803-9d0d-e61ce7aaf00f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facf2896-c765-4d03-b64c-95985ebbb750", "sighting_of_ref": "indicator--5573fc60-58f9-43e6-928d-46db5d53cb8a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7e84e9-c30f-42a7-8a78-bd3759dabe1f", "sighting_of_ref": "indicator--97c11837-d200-4ecd-8130-390beac16cfb", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c866c21-ef15-4d02-9c1d-c1fc326a18ea", "sighting_of_ref": "indicator--c70686b3-aab3-485d-855d-9d80ae47f29e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ef177-5a59-447c-85f9-aa8c03be36e1", "sighting_of_ref": "indicator--90fec0b7-5f26-4189-9dea-decd2e476176", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6b2ca6-9fa2-475c-8fcc-09362ced4dfb", "sighting_of_ref": "indicator--90fec0b7-5f26-4189-9dea-decd2e476176", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da969b5f-626d-4ae0-9e21-eb04df4bde6a", "sighting_of_ref": "indicator--4c77a1c4-dbba-4fcc-b91f-6bacfb268c49", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d2b135-e415-44a8-9e14-c3544ad3cd3b", "sighting_of_ref": "indicator--d22ce465-50f8-408f-9534-46855b30b711", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc6261b-5163-46ce-9364-d246c92a83a8", "sighting_of_ref": "indicator--50b4dd68-5d49-4197-9cbd-4dfb7510c34b", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f148a65-fea1-461e-a1c6-9c1a73f073be", "sighting_of_ref": "indicator--50b4dd68-5d49-4197-9cbd-4dfb7510c34b", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99e17d1-8546-4f33-9ad3-84c122193845", "sighting_of_ref": "indicator--6f2e942b-b868-4708-a0dc-d5e09bcc2fdc", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e4f49-b5bc-4d86-a118-c6a9e3504769", "sighting_of_ref": "indicator--6f2e942b-b868-4708-a0dc-d5e09bcc2fdc", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b05cd-1243-4ba2-8cdd-c160b339a84b", "sighting_of_ref": "indicator--e5ee0eeb-ebd1-4e62-b74b-3682c349c958", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58aa792d-27e3-47cf-92fa-613a89277dab", "sighting_of_ref": "indicator--e06c6daf-6276-4659-902a-4364b50f7da8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb867465-7cad-459d-ac2d-19cc121727e4", "sighting_of_ref": "indicator--d083db2c-c9cf-4f82-b382-f34b5fc42024", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3d4287-b437-4600-88d2-ac1fd0dd0f68", "sighting_of_ref": "indicator--cce70900-cc5c-4a7e-bee8-2d01ce0d3aa0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5d3b6e-9526-461e-996f-9a3e5bc828db", "sighting_of_ref": "indicator--e8916918-188e-48f3-9da6-cd3f1d700515", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5ec53f-b20d-4cc6-8ae4-77a6c33b259b", "sighting_of_ref": "indicator--24dbc2a7-6e12-45d7-8544-d8fd9f6538a5", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc33f01b-3d94-4d82-b8f1-2f01787334a4", "sighting_of_ref": "indicator--ef6ce0c1-899f-4933-ad4d-c61f0b9381a1", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbe04e9-aa3c-44ee-8239-a5aeda34ab13", "sighting_of_ref": "indicator--c87cad8f-9bcf-4a73-a4f5-df4283773b13", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2250143-f07c-4a74-bc75-0baca26b07a0", "sighting_of_ref": "indicator--bdfe3591-65f0-4360-8e78-c0ad1d1bddd2", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e645f01-d7c4-444f-8a85-e95d7914dd8a", "sighting_of_ref": "indicator--a0fdef20-65b6-4387-9b07-d066fb429d7a", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac42fe1-82d5-46d5-ba12-b792bec2a36b", "sighting_of_ref": "indicator--9da9aca7-722f-42ce-9f35-eaf66de246d8", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b78f7-7c8c-4952-bd1c-997ef985e437", "sighting_of_ref": "indicator--d4f0766d-691f-4049-a71f-9786c192618c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f250977-5cbb-4f27-8ed0-93b93fec225c", "sighting_of_ref": "indicator--dc2b6941-c9f1-402d-b0bb-21ac4c6552c4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d377ce-0bd0-4fd3-b8c9-5f73682a2165", "sighting_of_ref": "indicator--630563a5-7c79-4b59-b4c4-adf0c7c7cd87", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b7633-e1e9-4b52-ac05-1adabc431e9c", "sighting_of_ref": "indicator--246944bc-9020-40d9-8600-f14471fa0963", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18707b18-6364-42aa-b42b-7ab1c00ada0a", "sighting_of_ref": "indicator--4b32483e-685b-4d16-94c3-8bbd9e6c429b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8668eb-e34a-4d66-9a79-2abebc8726a3", "sighting_of_ref": "indicator--aba68b70-8313-4538-b984-20d0341a2868", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5fe84e-6534-4139-9488-d3ea7f7f5e67", "sighting_of_ref": "indicator--752301d1-9685-4df4-a5d0-926a11711c80", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae4d275-049d-4282-aacb-8512d347809e", "sighting_of_ref": "indicator--c98368ea-9d53-4e27-9029-2cf262e06f7e", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e6c44e-22cf-467d-814c-d133243e88fe", "sighting_of_ref": "indicator--daf112ec-f3ff-4e75-9168-831403361c6c", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb15b6f-1bbb-46bd-bbfc-0e63a24d7deb", "sighting_of_ref": "indicator--9f4ff62d-4668-4331-af55-65cd3c5aa73d", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c07a534-8128-420b-a7a7-0ea3de6ecae1", "sighting_of_ref": "indicator--d1723bec-396c-4bc7-aa5b-8194e0c79dd4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3532d15-7175-4142-933a-1a96b5b65d1d", "sighting_of_ref": "indicator--376b4710-ffe6-4b02-9ceb-fcee6213dd61", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db232b1a-6a05-4760-91c9-1f0ff9dd5f7f", "sighting_of_ref": "indicator--5602d27b-f90d-4bff-a9d4-119640c7cfc0", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebd2515-7c6a-49e9-b066-330f7ebcb782", "sighting_of_ref": "indicator--55807746-901c-4e1c-99c9-6f1165073e6b", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8338932e-25a4-4a7b-8dc1-3495d647c642", "sighting_of_ref": "indicator--ecddbd93-af84-4f06-9cfe-cb15d2a93ca4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7611a355-3158-475a-ae93-3106788edeb7", "sighting_of_ref": "indicator--c12aa895-3b96-438c-8d09-38b7401e8aa1", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea682d8c-62bf-49ef-b068-fce1e00f566d", "sighting_of_ref": "indicator--5c2457ed-e79e-45e7-b342-1e95f4d9d0a4", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad118fa7-e457-4abd-96e5-e3d750466f78", "sighting_of_ref": "indicator--5c2457ed-e79e-45e7-b342-1e95f4d9d0a4", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a73d70-3a35-471c-bf6a-8ddfcc8efbb8", "sighting_of_ref": "indicator--bdf963ca-63bc-4484-a6f1-c0e941a081f8", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f060e58e-0eab-4f54-97c3-0cae23353b6d", "sighting_of_ref": "indicator--bdf963ca-63bc-4484-a6f1-c0e941a081f8", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c55e414-61a3-482d-83f0-3def18a5c82c", "sighting_of_ref": "indicator--a2e51682-019e-47dc-ac11-5b6f2af55fee", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36387c0-c458-4421-8be9-0b724d1a8267", "sighting_of_ref": "indicator--637459b0-68e5-4b01-8316-f7773b6a2cba", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f33834-5f49-4022-9867-552e7c050f20", "sighting_of_ref": "indicator--637459b0-68e5-4b01-8316-f7773b6a2cba", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6aae28-4edc-49fd-a1b4-b3502dac45fb", "sighting_of_ref": "indicator--b45627e0-4aa9-41e6-8736-a33e07ceee64", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a1fc2-883c-47ab-b824-dc7ec246f8e0", "sighting_of_ref": "indicator--8308ae7f-6a6a-4a17-b7fa-c30735e87d76", "where_sighted_refs": ["location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e91cb29-52ae-4d19-b8d2-52f63318834c", "sighting_of_ref": "indicator--e6ad18c5-9d7f-40ec-9add-282be3382f69", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c5d091-43af-4c5a-bbff-74af7ff1d69f", "sighting_of_ref": "indicator--b1e3b646-6bda-4bfe-ad93-370f419af822", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488f36c4-276d-4f8f-b1f9-b122d0afb14e", "sighting_of_ref": "indicator--d9cba00d-eec6-42e1-b5a4-29010433df9d", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d37b12-6d0f-4830-b22a-5ddfa18416c3", "sighting_of_ref": "indicator--d9cba00d-eec6-42e1-b5a4-29010433df9d", "where_sighted_refs": ["location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26453b07-49c7-4741-b141-87b6b446d5cc", "sighting_of_ref": "indicator--6bb72a07-4a27-4c89-950c-d74dc99ea3ba", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e596435-db85-4d3b-8681-f8838ecad34d", "sighting_of_ref": "indicator--73afa353-d900-4b69-b53f-1dd76af63914", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3220fc7c-4910-480a-917b-ab3fe74c7ae0", "sighting_of_ref": "indicator--19788476-7754-4eb2-a9c8-d622c55adc83", "where_sighted_refs": ["location--fc9ec801-2f83-451c-bfab-942de8d8c6f0"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d20760-16a1-405e-967b-23c05d5743a8", "sighting_of_ref": "indicator--7f28fcb4-7548-4654-bb1b-56875b4df93f", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813199ea-80d8-498b-8405-90fc8ec08c17", "sighting_of_ref": "indicator--8d606a31-f1b9-4797-924d-5f10d6fa6fad", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4914b2e9-13f7-4580-9c41-7464bcf281c8", "sighting_of_ref": "indicator--5a9702e2-6469-4bdf-9907-ae90b458b3c6", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147a33c-a29f-485e-aedc-e62990cf596a", "sighting_of_ref": "indicator--10174dcc-25fc-48ea-9420-eefc554599e4", "where_sighted_refs": ["location--fe0f637c-da59-4c9a-9898-86e6a338427e"], "first_seen": "2026-06-01T00:00:00.000Z", "last_seen": "2026-06-01T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--a76966ba-1d21-4b10-90a1-4e6c9e3e781e", "name": "Threat Report for 2026-06-01", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-02T11:00:02.142Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--fc9ec801-2f83-451c-bfab-942de8d8c6f0", "location--a81025d1-c9a5-411f-8880-d9ad32dcf2f5", "location--fe0f637c-da59-4c9a-9898-86e6a338427e", "location--eaca88c9-d01d-4cda-bb1e-c29f3d65031c", "infrastructure--21cd087c-5153-4bf9-92e2-d73706bd7348", "infrastructure--7b37e634-7528-4638-9478-786b6ccb3074", "relationship--f1232a5e-4c0b-4173-aa5a-fa87c1d51b62", "infrastructure--664f0e0c-b58a-4291-ae85-f303fcbcc8a7", "relationship--4ee29dfc-597c-40a2-82ee-7bb8869c2776", "infrastructure--cffcc7f5-b6ca-40cc-8400-d2c87a81b3b3", "infrastructure--0edaa4a2-23d0-4ed7-a155-5f88033be3db", "relationship--3daa65b4-a85e-415d-82dc-12dc7f8f3f21", "infrastructure--938ff836-02af-40dc-94d7-392029af35b2", "relationship--0a26fe18-cc8d-45c4-90cc-2cad47a1bc29", "vulnerability--48968251-4c1f-49e2-bd8c-298391c8c3fa", "vulnerability--0c30c94c-c832-40c6-8ff6-5ed951dd5fa2", "indicator--e72f65e6-4627-463b-aa97-8db5b56e29a8", "indicator--b82fb0b6-0105-4c5d-841b-3bcd6941b3b2", "indicator--929003e6-fa92-41de-89f1-b1755ae20074", "indicator--7a51e495-c348-4bc5-8593-fdd2f3567da1", "indicator--259e1a09-c768-4b73-8836-272587dd861d", "indicator--b7b4eb62-fa8d-47cc-9587-db77222b0faa", "indicator--5225b0fd-60d1-4f91-9428-5dbac1b13471", "indicator--e1d02aca-8fde-4d23-a673-692b1f29143e", "indicator--34c1f096-c561-47aa-bdd1-0bb0b2b9085d", "indicator--e5287d0c-b63a-48a5-96f7-6cf5aa416fba", "indicator--823e762d-4324-4ff4-b4bc-2f2173a59c8b", "indicator--8a878566-9a58-48d6-b537-c3853ce77934", "indicator--2ff23343-076a-4cfa-b95a-59a87cdd970a", "indicator--c66c003f-e8ed-4627-8c5c-c0f9e1f3fa42", "indicator--4708e212-eb52-4aeb-9468-236b4937edb6", "indicator--beae4c11-a55e-4701-8f42-ea5c99fb40e1", "indicator--4ea78ad6-19d4-4a5a-9afb-a390cb1f58b7", "indicator--42b9d95a-c7ca-4218-bba1-611e68dbb432", "indicator--59205f94-09c8-47fa-af82-f85b83d4734b", "indicator--899745bb-5e52-4658-b47e-b67235e6ba4a", "indicator--38163117-4ed0-4bc6-b640-476cc3cca782", "indicator--515b4c3c-4981-4e29-91e1-06c96d14c293", "indicator--120b215d-b70f-49a1-b494-7488632499ef", "indicator--e8618635-2b77-456a-ae7a-492e55c070a4", "indicator--f7e9697e-5366-4946-86e9-ac88b4cf4d3f", "indicator--e2f423f8-a0a9-4b29-9612-4906ae0eb017", "indicator--1fed156a-e933-4b5c-8ff8-ec4d10a9a504", "indicator--0c632473-3dfc-4871-b1ba-9f989920c755", "indicator--41e6e181-bd0d-4e26-ab5b-f4b71031c1e7", "indicator--a8238fd2-7a0d-4dfd-83e6-29e8e15fc2b4", "indicator--0bbd00c7-d274-45e6-84c6-ef7127dad8ed", "indicator--9d2fea37-4505-455b-a822-0647a6555899", "indicator--d0dc3081-0342-46c4-9eed-444cf695d309", "indicator--ccdc89f9-8106-4874-a5ef-b1a25e133696", "indicator--2a607f31-5374-4ef7-a02b-85fdf6bfba95", "indicator--9adc43d5-09d8-4054-bd2f-8c2f81cad730", "indicator--e01e311e-7cc2-498c-a40a-8fb64c3133a3", "indicator--a5e797d1-0e31-4b9b-8a11-ffad8ac641e3", "indicator--e880d546-fca8-465b-a1ab-2a2fa0518374", "indicator--e0a09088-b473-410d-bda3-8356e10ad436", "indicator--18d09c62-e06c-4cda-bd8b-f34db5da0566", "indicator--efb31c0f-04e3-4907-afb3-ffd0f2d31643", "indicator--861fa62b-6309-4e21-a754-32095c382f38", "indicator--08baf522-4e99-412f-9015-20f7472fd8e9", "indicator--6d90fd1f-b585-4818-a672-cb7317af5a17", "indicator--3a730bf9-cb26-41b7-8b45-7d3f1ba62079", "indicator--6e3fbe82-6a1d-41b7-879b-39e838dc4f73", "indicator--3cf52973-2e6a-4e5d-a022-5638a6878481", "indicator--aa1d2e27-e9d8-4562-9b65-8886aa0bd07b", "indicator--673c64e5-509d-4970-a8b0-809183344ca5", "indicator--084d5431-adf8-44d9-a5f7-9e10095aea87", "indicator--d5f9bacc-1bda-4010-90d0-f89bb13d2786", "indicator--49038e52-a5ef-4984-9307-5c860637bef0", "indicator--d1300012-43b3-477a-aa65-785f85bbd79d", "indicator--8de2a6d1-8fb4-410b-86a3-0cf48a17b7ea", "indicator--1f73509e-7c82-414b-867a-7ccbfcd9f26a", "indicator--a4a538dc-5614-49cf-8bd0-6fa77a40e6d5", "indicator--81ef07bc-daa0-486d-ab77-0f339f54f267", "indicator--3e5efa46-7643-4f4e-b230-ef2addf51d9d", "indicator--29478389-fe8f-47a6-a0e6-8b19215f5f2d", "indicator--11aded62-0b3b-4e5e-8c78-3289c8245610", "indicator--7f2f37a5-7ebb-4b1f-87e0-9a63056ba7af", "indicator--e0a05593-80b5-4448-9dcb-0c051a0caab5", "indicator--6ba0a098-143f-40b1-9515-6b55a9ef4c8f", "indicator--ada62457-09e6-41fe-bf28-52f9a811b696", "indicator--ccb5cc14-358a-4e3a-8348-5eb03db13a8e", "indicator--a4a542dd-033c-4599-9584-c6fc2b20b1d2", "indicator--6468adcf-0286-4f1d-8b05-1d7d040d976d", "indicator--8a1839be-baaf-4e46-a6e3-0cffb640ae3b", "indicator--6f4b6fae-af99-4260-95b4-d394e0160f1a", "indicator--1db48c66-7c5f-4c46-999e-d7f9f0303f13", "indicator--b78664ed-1ab5-429c-8e8b-47d29cc5d52e", "indicator--f9637114-f60f-4172-a04f-b053164d5490", "indicator--9aa493c9-50b2-405a-bd4f-217a4d5d16b9", "indicator--2d3ee0a4-c321-446c-b387-55f18e0cf9e1", "indicator--ca2d2a21-e7aa-4bad-bc48-7a4010211c66", "indicator--cbea0563-6627-4aa6-83e4-e481f6a90d25", "indicator--9c881834-2bf1-4aa9-ba4c-f88949c2544c", "indicator--c7f7858d-1a78-4618-835b-542cb1b390b3", "indicator--ad356a58-b9a6-409f-837c-c576c2a310bd", "indicator--bb779fa0-85e9-4756-bfc3-25e98c6e98f5", "indicator--875fb2ee-39de-476c-8783-75a23ed4d6c7", "indicator--b2539d38-a913-492d-8302-5b923c81196a", "indicator--022b09eb-0812-4de8-835f-a1f91b7464c9", "indicator--5e6a24c3-9494-4285-aec2-68607b2386f5", "indicator--434864d7-157a-4751-b6a3-1f6a16913725", "indicator--4887f2e1-092f-48f0-971f-4950f8cdb92f", "indicator--9be62b11-f3cc-40ec-ba4b-01a431f3a88c", "indicator--113f0407-3427-4b3d-a7b4-d5857b83121d", "indicator--8f97deb5-e69d-4b8c-940e-bafe1acbd1f1", "indicator--103004ee-233a-4fbe-967f-7bd7291b12cf", "indicator--cb338f61-df05-4d10-8e29-729df56ff082", "indicator--133b070a-62a8-4bff-b7ad-69c4daaacf51", "indicator--f594c069-a1d6-450c-8ff2-213f9bd021cf", "indicator--a4d91dad-2251-458e-b776-03fab40498ea", "indicator--a26d5cbf-b982-4ccd-8397-ca28155fc98f", "indicator--e1fe9446-38bb-414d-84c4-91bf09cb5a05", "indicator--2f2012dd-733e-42ad-a6fd-12444c800349", "indicator--34f3719b-d394-4dff-bb54-b2b0761adaed", "indicator--6de3a36d-7db9-4208-80e7-6fa7eb74750a", "indicator--1f25b571-2e2d-4898-b094-a5c26d254fe7", "indicator--ae7c96df-9720-4cb7-9307-96642e2dd506", "indicator--4d3eeb3c-2e20-43f2-8f8b-d4099314c100", "indicator--be4088e1-a499-4ae8-a2bd-83ea237a5d0d", "indicator--76ccd024-1037-4421-95ed-34489092b7b4", "indicator--b8e16b42-7c63-4313-b8a5-ed381caaeb9f", "indicator--4ef8a903-7d29-4916-914d-fbd0d279ea66", "indicator--e85a38c3-c72c-4275-999b-27e6f97d288b", "indicator--282f35b1-9a98-4574-8949-f8965522184f", "indicator--23e7b83b-4ae3-414e-814d-2fa264d02be6", "indicator--b12d1410-8909-4b77-9054-3c96f910d909", "indicator--87aaf816-0a25-43fb-81b6-cf17bb583d7f", "indicator--7f358d07-8c18-4b19-aa62-64334ec19c27", "indicator--a24a207a-571b-4fd1-8505-a7709945cfc4", "indicator--c095d904-f030-4e92-9d4d-c4e848dc91de", "indicator--800ee1cd-a7d5-402d-bf6b-539e3cc45d09", "indicator--60107e09-9bf3-4b30-979a-83456dec6a6d", "indicator--9fe1c6ef-0513-48aa-bff2-3a58602e0687", "indicator--d5fd726c-09eb-4f7c-b755-8f4586084f8f", "indicator--5519fabe-b9e5-444f-b3f7-8dda0880de80", "indicator--0bb74af9-fc3a-47cc-af32-fa0294bb9071", "indicator--e5841f92-a428-4b06-8af3-1441d9437091", "indicator--4a8530a4-ede9-4c1c-9abf-079ac1c7142a", "indicator--362b2dd9-1a82-4a00-bd03-a2aa8af15f99", "indicator--9409bcd6-ee7d-47d1-970b-ee88a68e4665", "indicator--246c38e6-b5b3-4804-ab4a-a0ca979f9be3", "indicator--46187cdc-a283-4c58-a7f0-e363a07e46f4", "indicator--c89a6c56-0868-4e73-9784-ba94d2c60287", "indicator--4e5a01c0-cc47-41ba-a602-9297cae28e53", "indicator--5144a852-bf32-4ed9-93d7-37c7313af598", "indicator--ae94dc1e-9e93-4bae-8ffe-586a92ea510c", "indicator--8f2abf7a-99aa-4599-9983-8f067f3a593f", "indicator--4365c1f2-566e-4a74-9ae6-37ea7517711e", "indicator--1e0dee5a-35ea-4e76-acc1-aa1510ed63fe", "indicator--1632f37e-48f6-4cbb-87e3-6fe0a1105dcc", "indicator--2c0de801-c1e7-4ae2-9abd-18dc6e567d3d", "indicator--970859cd-c08e-4545-accd-de8a06364fb2", "indicator--d3ccdabe-5d44-47f7-b952-124b09823761", "indicator--2442ea87-275e-4382-8dd9-30384aa43adb", "indicator--6bf98466-6b9a-4ec8-9e3e-be05cd0ab72e", "indicator--c9f743db-f183-4cd7-904d-f1caef89c931", "indicator--92c56d5c-e2a6-4a8e-86a8-be55f38f64be", "indicator--5262b0bd-0170-42fb-8009-0987f0e36d82", "indicator--87166938-aa41-466f-8473-02cce22eb95e", "indicator--a05c7e2a-9f67-44e2-8d0d-fbfcd8cb5820", "indicator--03393a12-1a1d-496c-a6cb-c810c0403eef", "indicator--aab5dd44-14a6-4c3c-b87c-fc315b74bfbe", "indicator--eda12d41-8097-49f8-b69f-84b8ef94994c", "indicator--878052cd-6e15-41c0-bc90-40042641eeec", "indicator--3fb880dc-19d8-4b84-8a93-6b872b019a1b", "indicator--1648471d-ee4b-46f0-9ff7-35dedbce795b", "indicator--2cb2f63f-3639-4041-aaa7-eefdbe342f9e", "indicator--d75bc446-da31-481e-87c3-b21580bdc49d", "indicator--abff129c-6a44-4f1e-a23b-dbf379b8c491", "indicator--279f2698-6195-4851-bfc2-ec67ec3dc0a6", "indicator--aea78921-8cb2-4331-9f13-88503dc46a78", "indicator--233dade3-2d12-4532-911e-6ff19a34e534", "indicator--9bd88bee-a82b-4d45-b601-693758ca22d4", "indicator--f01c3789-e6ae-4ab8-b088-ac4fd0079693", "indicator--4bceac5a-f64e-4729-a11d-b1eae8a50ca0", "indicator--65353cd9-9d09-4c1c-accc-bc599c84cfeb", "indicator--832479e8-5729-4396-88ac-f3b9e9ef06e6", "indicator--c112efa3-4098-4a0e-92f5-ae852a2bae9b", "indicator--1073767d-1f75-49c5-884c-c8170911df61", "indicator--b47ac41f-728e-44cd-bcfe-02106a70486c", "indicator--ad0d459f-997f-4a1f-8785-1f48cd0e9cd8", "indicator--8a23ec41-7f4d-48e4-b12f-330aa66de753", "indicator--de0a9c11-4385-4039-b642-44be5018d3f9", "indicator--d72eff00-930f-4d67-9ea8-a2d22a681123", "indicator--2a2d2933-a7fe-4b0b-b1be-3039facc6621", "indicator--bfd509fd-3be6-4b5b-81d9-3fb300abc954", "indicator--19b59f6a-a4fb-4460-8352-abad0f051459", "indicator--a9c35d49-7c75-4c71-b40f-8eb50c6d384c", "indicator--880cf560-7ef9-43ff-925f-e4e08e244934", "indicator--9da0c8bb-8d19-48f5-b765-4419e399bf88", "indicator--186ab05a-4f5d-48d1-8ec8-03908aa15a04", "indicator--303c6af9-3c2b-4ca6-8b9c-57f6523553a8", "indicator--fc95965b-ad96-492b-9227-234444c81a53", "indicator--1ae17bd3-7df2-4305-9fdc-0e88888d42d5", "indicator--19a31f3e-5688-402d-acba-8a93bef1739b", "indicator--93e2e454-2d3d-45fd-a032-7a6e951e98e4", "indicator--dac664bf-34f5-4c48-8fd5-587cf8a30761", "indicator--c63d926e-fcef-4795-b221-8e8b6779b305", "indicator--de7cd4dd-05d0-45c0-b31a-86dc916b40d0", "indicator--87905804-6156-4559-bad0-7b6ce81349dd", "indicator--c343846f-4ad1-49f4-9a4d-364039b189cc", "indicator--e9d343aa-6a72-4747-a9ea-73209f658053", "indicator--fa227f83-b1f4-47e4-9947-a00da8ea58b7", "indicator--0133f1a4-44ee-4ffb-a97c-12c097e714cc", "indicator--766bf573-bc30-47f5-a84f-821645099c34", "indicator--f5711fd7-6584-4c1f-8847-4dfc355e0cbf", "indicator--48d7eb14-15e2-466e-b73b-901ec55615df", "indicator--ab8aa376-e0ab-4318-ab9d-9f1da38bec83", "indicator--6b981a8e-1a2a-4995-9737-430bc9a6ee6d", "indicator--02a1bcdb-2fc9-452a-b0ff-8e3edec79b06", "indicator--be2e3fe2-2836-480c-aa03-37228b0a2d39", "indicator--0aff99df-af19-4927-ae55-3b91fe322aaf", "indicator--54c37f12-a8c8-4a19-bb0b-4e5d6839f19e", "indicator--45727778-a86e-4b26-9674-07a2f2a882b1", "indicator--b452b7e3-cba4-4d3d-af22-2bcf74bb6340", "indicator--093f2161-635e-4268-8322-be451598ffc2", "indicator--03885840-3188-4f2b-a3ea-2dd039fb6f10", "indicator--14efb142-52de-4e79-aead-341bce6c265f", "indicator--f2ddaa40-1a27-448b-8ae1-7e09abda474b", "indicator--f6783bea-a58d-4ea1-9cae-9cc04129ca2e", "indicator--975b8a62-2392-4d23-8837-993420a5f280", "indicator--6142403f-cc04-45b1-8db2-496815f9e405", "indicator--b1e24ee4-780a-47d0-928a-8df61c3ffb46", "indicator--04f9137f-ef0b-45b3-be3a-383aae2b02a6", "indicator--3fa261c3-ea80-4bd4-83fd-e6d01c327094", "indicator--d93974b1-febc-4728-80b9-c625aab71801", "indicator--5a9689c7-e67a-461b-bb7c-4feb027f5263", "indicator--fd882547-1064-4cd4-a32f-1cdd4387703d", "indicator--c92aefb3-aa5b-431d-aa3a-40f9fcb83412", "indicator--13181200-7c6f-4b78-b256-0399dd370047", "indicator--a00b205b-e307-4d8f-972b-9fd703af00b8", "indicator--d21ea58a-3e05-4d60-a262-2859539fd1cb", "indicator--9c46131a-ab7b-4fa2-ab9a-56c70de9df4e", "indicator--3f8a28b7-35c0-4b9f-a2ff-211dff8cbf09", "indicator--022843bd-07eb-48d8-bd47-4cfe3448b23a", "indicator--b82733b8-2cc2-474b-8e2a-94980e980345", "indicator--677133d1-bff9-49fe-ba18-43f868c2a07a", "indicator--111fefec-0c34-4713-a8da-227d5f77e283", "indicator--eba35348-d53a-40be-978e-544f1fdc30dc", "indicator--c3084299-021f-40ac-a870-1c6059a8d2db", "indicator--b1d22fb8-ecbc-42d2-ac6d-813757ccb97a", "indicator--d95f51f1-c653-4ab9-93d6-9f664e1ba776", "indicator--9b89c582-6c04-4886-9427-867911153024", "indicator--64ecb16b-fcb6-42ef-98c4-3dc9c4a6936e", "indicator--fff7dc5d-6893-4bcd-9160-c364b70d62b2", "indicator--c40ee71b-9088-4e77-9ca0-cf91a49081df", "indicator--30b73323-32d1-4de0-b7b6-a239c2589240", "indicator--a50c3477-9d62-4b22-a03a-6be28333f41a", "indicator--a20a4553-cd7f-4dda-bc87-3935660aa665", "indicator--84f22695-bca1-47df-b149-859034817e68", "indicator--b3ac8e4b-31ab-4991-b673-08560e2d73b8", "indicator--e34c3dbf-3e15-45ad-a654-f11a548c7930", "indicator--6f431894-5b9e-4ddd-ace8-7c5a39a209de", "indicator--8cf049fd-2480-4f8d-af94-806236dd168c", "indicator--48859725-eac2-4640-8ec7-e63d5605ed17", "indicator--6958d071-8dd4-4341-8b6e-f2a37e00157f", "indicator--bb9d71ee-6749-4d14-98c7-19ce833bf602", "indicator--369993d6-0ae2-4862-97f4-2054c419edea", "indicator--2531bce7-bcef-4fa7-a12c-a0fd62d709ed", "indicator--2ce1ffd2-6607-4d19-a3c0-75005a1d55f5", "indicator--770a87e9-a676-4b94-810a-590f32ca8596", "indicator--a4fb09c4-7399-4f83-9b0b-1a1567917242", "indicator--2d1a8562-6a6f-451a-99c5-69c144bd245a", "indicator--c2b61e91-eff9-438b-84e7-9b1c051191c8", "indicator--0f76fb1d-23eb-41b6-8608-64dcb98d0e8a", "indicator--df29176c-4418-46e4-a27e-abdc608c2e38", "indicator--0fff4391-02f8-44ca-b928-15a3358812ce", "indicator--5a8b4ca3-bcbd-48a8-9150-1678c70ffe61", "indicator--e98ec745-7c76-47f7-93f2-c79ae56666ef", "indicator--e67c36e9-804c-4c7e-9c19-c076203345fe", "indicator--607144cd-edc6-4779-9086-1d8c51de46ed", "indicator--f6dbc513-7b54-4ae5-84da-47909e4c7dd0", "indicator--73dfb997-258e-4a38-9b20-d3dea4000bf0", "indicator--54f8d8af-089e-4d77-87bd-ab019dd66930", "indicator--9b89b69c-a3cd-4adc-8145-ac27ae0def94", "indicator--bdc9a920-477d-4256-b8a9-24b57cc10cc7", "indicator--90ba8f89-98e8-44ec-9e23-ee443ddade14", "indicator--fa396889-692d-40fa-8921-c21a657d045d", "indicator--20a7d7f2-b375-4c98-b96f-6757e7fff64d", "indicator--a6888f81-4742-4fd9-a0c9-69e4dc053eed", "indicator--8eba9e6c-cf72-4a87-a4ec-0bfc3d79bf5a", "indicator--ad0e2680-1898-4f76-a60a-93b530d21fda", "indicator--2120c36b-6638-4571-a728-21680c2bc819", "indicator--3d06b829-7ba0-4737-993e-adfd03e72eb5", "indicator--e3477ba3-8016-43b9-b6eb-117592214fd8", "indicator--da809001-9fe4-47b9-9c68-dac357a67456", "indicator--afedb359-c229-44e0-8f57-33dd4ee08de3", "indicator--5298e915-f7ff-4808-9b57-aa81e5ef984c", "indicator--fd74ec4b-687d-4b8e-884e-a59fe41fa352", "indicator--90ed2144-15a4-443b-b7c0-d9396d89c448", "indicator--f3dd89f2-f8ea-4784-9a4f-bc604d2cba83", "indicator--1b46e709-743e-4e5b-9b2a-4b45a7f9bd36", "indicator--30e761e8-29da-4012-a8b8-f1c6eee7f437", "indicator--92a69b01-3c0e-4602-9ee4-88f52372d129", "indicator--44ce9af7-818e-4cff-805f-27fa74ef5cf7", "indicator--423b3397-6117-4dd8-8dbb-6d3aa0d690fd", "indicator--bbd291dd-da54-4b72-935a-0d8ad07cfaad", "indicator--44de058e-6927-42e4-ba17-0bf7e5086b0f", "indicator--ad0275ce-c163-47a5-8dd9-9eddcd55aa27", "indicator--d7673062-983f-444b-bd6a-f69a5cb1ccdb", "indicator--0f8c1315-e277-4772-a02d-c890f6622ba7", "indicator--f5cd244b-3d79-40e3-af67-1d9842a4a4d9", "indicator--5fd73138-8654-4a67-8c64-d0e99049a813", "indicator--40b279e4-18af-4f07-b825-fb88653e4757", "indicator--fbf3aa25-ab60-4f6e-9232-50c92211b04c", "indicator--415f3935-3eca-44ad-b92c-9cefdd2c9efd", "indicator--2279013c-c5b8-4ba1-9564-999de9d05ee7", "indicator--7f64014b-29f9-40b5-ad60-eeac0346b172", "indicator--2d87c758-6ba8-46a4-bb71-d59c10c47718", "indicator--910f348f-cf9b-4f0b-8d35-c12b36f80534", "indicator--67fdc2c1-6ae3-4d83-9adf-41b8952c8bb7", "indicator--8c786ab2-66c3-4155-9e6f-1b07bd441fce", "indicator--a339a21b-7051-42e6-8de2-6995380e6f05", "indicator--9f8c228e-dd75-4f84-89fc-047a0fd5b2ce", "indicator--ee38a2cd-79af-4135-b529-b90ca71e2624", "indicator--78352af9-b635-4d05-9815-e75bb9299f1a", "indicator--a8da8082-78cc-44d5-ac56-5ad2d8b763db", "indicator--382338bb-3c9b-4c08-8a83-0d29d7967658", "indicator--84b3229f-8028-4afc-b900-f18d3fa34bae", "indicator--e4ad5800-49e3-45e1-a561-d4b34861ab57", "indicator--476e8305-9b8c-40ca-a39f-2af4ff8813c9", "indicator--44a87368-c330-4693-b5b1-adf5014ca357", "indicator--ed1298ed-cc54-4b73-8e88-390e90d63fd4", "indicator--e29b2cd8-551c-4d03-b454-ec74e00a62ae", "indicator--296c516c-4872-4eea-97e5-2823a6aa1860", "indicator--acd15344-bebf-4b94-9dc2-ba3b0b5d95cf", "indicator--dff8f037-c3c2-459a-991b-049caeb1882e", "indicator--1bd8381e-cf05-4fd9-9c9f-2ffefb26e0f7", "indicator--6c3a546f-6b13-4996-b939-e33f02c82362", "indicator--deb69735-5e85-45ff-a01f-e9bb9d74cb9b", "indicator--0c9ee493-c824-4a4b-9ed0-268be0a74016", "indicator--cf3918bb-ea1b-454a-8304-48bea9f1c069", "indicator--7e0bf5f2-5fc0-4b43-9a80-b7847939f471", "indicator--f788755e-f069-4caf-aa73-daa6112e110c", "indicator--b4cfb1a1-3a1f-467e-9076-7409f69214db", "indicator--bab469a5-3597-40ef-a903-82a71ccf7fbb", "indicator--0f959b54-f7ff-44d0-8217-698d8270f228", "indicator--514e20d3-dcbc-43ab-a7ac-b6f5c49c2041", "indicator--ef25634c-7141-45a1-9e51-4308b6686901", "indicator--fbf31b0a-d652-4f9a-8f28-2393d0531a5d", "indicator--7bb1f3b2-f0b5-4249-8961-03a875ac533d", "indicator--8f4e1e41-ff67-4d61-b634-134a66d2535b", "indicator--163d1acc-9465-4e03-a356-17e8db39fbab", "indicator--18332253-27a5-4773-aad6-abb654a707c1", "indicator--73d464be-dc70-4c18-894a-32be512c993e", "indicator--bfaa6a20-59fe-4896-946a-dc54414f807b", "indicator--17b90b25-9225-48a9-90f3-4e4c7b92c855", "indicator--86ad4e65-90d4-41e6-81ff-21cc4c81cf2f", "indicator--1f2a8c1e-b802-4dba-a692-c90a831fa09a", "indicator--94acb9c1-075a-4da3-bc55-02c128982f81", "indicator--ffcade6f-3b87-439e-8cd5-eccb01138dbf", "indicator--0243f3d8-2739-45b0-b04c-3af976ab1157", "indicator--a4eb1ab5-e196-4ba6-82c6-747c5f026fbc", "indicator--bf299100-7656-4611-8129-dadf946fda9a", "indicator--c2486245-a571-419b-9dc8-00725f52a27a", "indicator--82991735-3f97-4fd7-bdd9-5afeeee66477", "indicator--23bc507e-7d4a-43a4-9b8c-9e84756d7a14", "indicator--ce6d2420-7e83-46db-bdd6-fef4e49a5e20", "indicator--41c97381-4c86-4037-adcb-3e18661a371e", "indicator--5af55d0f-05c3-444e-a864-16617e13c6bb", "indicator--4139cec7-8c4a-4c05-8a62-357f9711a6cf", "indicator--7614f737-f1ad-49b0-80b0-f52eca778548", "indicator--b93fc76f-1e4e-479e-b85d-aa5602069576", "indicator--9e40d60b-7954-4aae-bc1b-9a60cfbf032e", "indicator--d510b825-14c6-49aa-8e09-f8694885f137", "indicator--88e6cc8c-4cb8-4a3b-bab1-fb60ab834d00", "indicator--acbe614d-72ca-480c-8403-10d0c1174322", "indicator--2c84bd52-b1cf-49c4-bfad-ffb842f2d618", "indicator--15705dec-51bc-410b-8672-dbf54f9ebbe8", "indicator--b3ca6e7a-b732-4d1c-912d-2444d3ff5fee", "indicator--114e5892-d49d-42e9-8578-25717463263a", "indicator--e797a56c-729b-4b23-a28e-2c28d3d96ec6", "indicator--ef24de77-44f7-4140-a962-5fb0c36b9ede", "indicator--9e0796c1-3f00-46cb-9546-f55b23f4e726", "indicator--5778ec61-606d-4a80-9d78-6c826fd40e2e", "indicator--afd29927-4b05-4393-99fb-d060be169290", "indicator--98028d6d-f807-4919-9a26-b09fbc51ab8c", "indicator--0cff4a35-ce91-4d3d-879f-99006d7d7720", "indicator--b6f742a9-30bd-4b91-b952-a654d9dc74e0", "indicator--3f091f19-ab34-46d3-a005-862f67651689", "indicator--91dd29bb-9d07-4729-a1dd-d100b3aca882", "indicator--5c30aa23-dcde-4a06-a71e-c108cc8677c4", "indicator--bdc11494-9ec3-491c-9330-af6945f4c5a9", "indicator--06d832f9-add8-4577-ab9d-b0bb12a3dd04", "indicator--a41c2cac-563e-41fa-af9b-f0cdf564d1b9", "indicator--f9993a13-a39a-4d8f-b404-9b84ee9ef403", "indicator--46708231-3cc1-45f6-8cc1-801c57358998", "indicator--479d789b-a780-4828-ae6a-3a9b9529c2ca", "indicator--8d6edf92-4c25-422a-af3f-12c7c519f155", "indicator--542ca04a-116a-46e0-8981-9da2a25120a8", "indicator--4febf740-ef5c-4d9b-8c14-fd06b0ab864d", "indicator--292b5d2b-908e-456a-9ab9-6d24274eea8b", "indicator--f76219a8-b913-491c-b832-636875eaec6f", "indicator--c7ccb7c4-46f8-4577-b864-32630bd902d1", "indicator--21e77121-06a6-45b5-b26c-4ba4b167bbaf", "indicator--2b275fd2-85b8-4a5d-8872-1abc88cd301b", "indicator--f19bc060-fce8-45ea-9a53-8624137c58fc", "indicator--98f70d47-736b-4e94-a380-ed9bc757e36d", "indicator--181dd6fa-5fa4-436d-af9d-f84fee01270f", "indicator--e080f73d-01b3-4a54-bf33-315411b8c895", "indicator--b869273a-eb15-4f86-b583-5f4457e80d3c", "indicator--53cc517d-428e-41c7-9445-d0d0fbca4ab8", "indicator--79a7369b-2683-4494-9918-c967d6b05558", "indicator--58a76041-1c2a-40b8-9437-9b4d98909464", "indicator--c892c18f-7ced-4556-b7b6-e1339b4f233c", "indicator--a509f3e1-f96c-4d84-9edb-85784a14f09d", "indicator--f4a81977-b8ed-490d-bf08-074a9f7f11cf", "indicator--744ed18f-4ddd-4b7d-a2db-253274cfbb1a", "indicator--60c8791c-55ab-4181-a2a8-107ed7c49813", "indicator--dceb3386-048a-49e8-bfa8-3d3891f97d19", "indicator--befed4f5-c72f-4bc5-a691-55e9e5cb6264", "indicator--97ce5c42-4690-44cc-b3cf-b026c05b3da5", "indicator--b6a9d0e6-5428-4bb7-bb27-d9396cb95b82", "indicator--d8c616ba-66d1-484d-8f3f-7647e5510c3e", "indicator--c35faec1-84ad-438a-b73a-6916f244f9b4", "indicator--c98b721c-0b71-464a-8546-2f64a5ec84f9", "indicator--4e2b8cd4-1d70-49c4-89ba-b87389233c4f", "indicator--f7696055-337c-48af-866a-350f2378b63f", "indicator--c3bacea7-ab57-4d7b-b1b8-67f9e48d061e", "indicator--754b787c-5b88-4678-a9e2-042215734836", "indicator--fee9891e-8b82-4cc2-90d6-087134a8c339", "indicator--b428a8a7-bef5-47a6-9c5a-36080bfb3fc9", "indicator--dc2b2748-fc90-4287-b089-0ebcf04f7b69", "indicator--f58559dc-1b6e-49d5-bdd6-92ab22eb3bed", "indicator--ed398f59-21aa-4890-bed0-82b234e0135f", "indicator--e6c7c177-60fa-4cea-b355-7b651ee9d9e6", "indicator--c92ba871-842f-436d-aaad-e9fd9ba2f76f", "indicator--54b6d18f-19f8-41db-841a-e12b55ed17f5", "indicator--a57bc9f0-c7d8-4b0b-b6a1-d7579fdc20b1", "indicator--ff6aa498-48e6-4669-bed8-16f4875a3a04", "indicator--0879c13e-f3b2-4a22-a22c-f959ec1d6457", "indicator--9d2d490d-5699-4b6e-b43c-7aeb7acf864c", "indicator--0c3479fb-f91c-4df7-8df6-9542935092b2", "indicator--f22cf775-b669-40b4-8e4c-d128eef73f70", "indicator--2cc073e4-116d-413f-b8c0-c6e84daed6bf", "indicator--c4260264-b09a-45c5-9904-f20b829496fa", "indicator--c58b8bff-1c8c-4a35-aa00-314407472df2", "indicator--5fd273e6-f4b4-44c7-bb9b-837b4df87b17", "indicator--0fe099d8-8f51-4dee-a422-4c6643f5dee2", "indicator--e1f6f438-1c64-4a64-b1d3-137f34e9ef5d", "indicator--9b8c42d4-c75c-4bbe-91af-12d36b290aee", "indicator--c3a3ab03-ad8b-4e8c-a867-4c4fb22f8c85", "indicator--13f2b61c-d8e1-4513-bd6e-ab34c408743d", "indicator--8f2b5c7c-efc4-4dcd-821c-49c62e754fd3", "indicator--f0b3a850-a53c-44cd-9300-5b31d74d9909", "indicator--805f300b-3f87-4eef-8f43-cb9758b564a9", "indicator--88878dbe-76f5-49c5-bae9-8f98df9b79c1", "indicator--d0956fc0-8ef0-4165-8bbf-95e572692a6b", "indicator--137f73af-4c5e-4b5b-bdbc-c041c60ef2f8", "indicator--4291f4fc-9d4a-40b4-bf71-571354935520", "indicator--c6b6f863-c437-416e-8784-2907d6844f7c", "indicator--ce5651e4-2e52-425d-8bd4-4060b95d8af4", "indicator--511d6a7f-dca7-4500-a443-ef0ca1c964cb", "indicator--21af3255-5553-430f-9cff-7102dbb8e2d0", "indicator--9624ce95-9d92-4936-b9ac-fac46bc53569", "indicator--ddbe2047-70f2-4549-966e-cafb3198769f", "indicator--42d96d98-3eab-4804-b6f8-83d6896e72b4", "indicator--1827c8aa-5c0c-40cb-b78b-695ff32aca24", "indicator--df01066a-3056-46b6-a27f-32a42955369f", "indicator--b6327320-09c0-4a52-8351-37d40107b95a", "indicator--1e87c125-50c2-4b5e-8512-2b5668b48dac", "indicator--acb00256-ca83-4267-8fa3-631273daf21d", "indicator--8e63c551-9b45-4f33-a30a-cac427bffa3d", "indicator--1ea6289d-7ab0-40f2-8f2b-87f241cdfbe5", "indicator--632e2f42-dadc-4312-bae9-c29aed76369e", "indicator--0ae50736-71b1-43b6-9444-e3bd5ae6f680", "indicator--f9f1c443-d894-4782-93c9-3f3226d9647a", "indicator--842f0e79-de21-49e0-8f5c-05e8771baf61", "indicator--6411e006-856d-4248-8969-a749c7964389", "indicator--67332aad-02f5-4891-a0c5-60eca5d9c34e", "indicator--9971794b-468c-454f-bff8-5b13240399ac", "indicator--48c52703-3357-4e41-a724-6f17ed94369d", "indicator--4c9d71d0-bb6b-494f-a006-97491ed08293", "indicator--42b678bd-8dd6-43c8-9f0e-b44df84f417b", "indicator--53c61813-a509-4be5-b0ee-19d0a663157c", "indicator--430fa8ad-01ed-4583-ada7-fd1829d54625", "indicator--dcba7bfc-36cc-4370-b195-9d1f063a75ed", "indicator--d8a856f0-7253-4fdf-af67-9e8dff5bbfae", "indicator--4e580c2c-5d59-4efa-a721-e8cd85b56e2f", "indicator--3d600ac8-1a4a-4312-9b7a-3fdf91f7ac62", "indicator--9da524d7-d658-45b7-a454-7dd2a2cc0dd2", "indicator--c37ca827-3d7b-4322-a48c-363e0b87222e", "indicator--c6873fd8-85f0-4a07-8b2c-c4dda74b0bfe", "indicator--e3e76c4c-5533-4160-b72f-060435402d80", "indicator--307bfd5b-7076-469b-a212-dc1d737578a6", "indicator--d2c6148d-f00e-4590-a8f7-241f74643112", "indicator--5fa01c10-b40e-4972-be20-d1e779c1716e", "indicator--dc02c3c4-f0ff-4df6-8825-2e919cad467a", "indicator--eab1da78-9383-401b-ad8d-faa1a86ae0f7", "indicator--ab83c3f0-2ecc-4884-81d2-fd001014954f", "indicator--210862c7-3cc7-4e5d-865c-0b2f4355cff4", "indicator--cb562d8f-d522-4f89-a62e-db728458fcc3", "indicator--d2412a0a-c5bd-4ce3-9750-9edef7287fb3", "indicator--2056769b-5d3a-4500-af3f-b81467bc5643", "indicator--e55311a9-865d-48b7-8d4d-0e6880a0a7cc", "indicator--25d23289-178d-42a2-a3c7-aab3ce251611", "indicator--402b16a4-43a0-4c43-863a-8b494e15913a", "indicator--54cd549e-5639-4a1e-8b30-e7b86669784e", "indicator--501c3576-553d-47d4-b1bd-1dacc477a005", "indicator--db510f56-6fd8-4994-8c24-01c531b4a018", "indicator--f2e19991-45d9-4c5a-bb73-460a552092ad", "indicator--1eac1ec2-5215-4ace-8626-847dd8169518", "indicator--89918539-ec2a-41ff-a514-66324829262e", "indicator--845f4eb5-7890-44e3-967a-7eee490bf2ad", "indicator--b4fe0192-1bcf-4d93-8085-25c8981aefe8", "indicator--69fc2571-83a2-44a4-b7d1-93a85ce92e7c", "indicator--5fc13fea-6282-497a-a8b4-cd859bfe805c", "indicator--aa0758ba-7242-48f5-ba43-09444e7dc54b", "indicator--715cba3f-9828-4dc6-8c84-12a855f52d3e", "indicator--c0258381-d0cc-4f01-a56a-5e29f8f21645", "indicator--16626e57-ad3a-48d2-8c87-f147056fe3b6", "indicator--1dfb9111-09d6-4d05-9c27-bb5f7fabdc5e", "indicator--eed54841-4f8c-4ca5-b4c0-20359eb6df31", "indicator--b817bf4d-5696-4436-ab2f-3ed3a388f371", "indicator--4f481713-3f95-4c2c-9547-18b584b18182", "indicator--dc89ec45-22f0-4361-95eb-29e33ab726ee", "indicator--233302be-9a29-4a03-ab0d-3c7c5cac3046", "indicator--213ebda9-685a-4d14-b9dd-26fa9b376c03", "indicator--1640d1fd-167f-45a9-8750-3ce23f1b6d52", "indicator--d5a22416-8965-49c2-afde-8a104b4d4603", "indicator--a7731d26-2c94-475e-87f1-9f1855e0223a", "indicator--aaa840df-cbae-414a-b88b-197ff5a507db", "indicator--067ef8d1-fae1-413e-9c5d-4b8684394acb", "indicator--1e6acdb5-c29a-4b3f-a369-b7f16f107066", "indicator--809830bf-517a-4d92-a523-4352975f109c", "indicator--b536284c-eb80-4625-bd08-2a45e748de43", "indicator--0c92478e-8c27-479b-9750-0db4950a8cfb", "indicator--f764b2c5-1ee6-43a3-8e00-0e561de943d7", "indicator--d8b6df35-9417-407b-997b-614124da936b", "indicator--f2f80e25-2475-4392-93d6-29cfe8da5911", "indicator--c445670c-dc2b-4fa2-a4b0-fe6dcf1beb8a", "indicator--d89fe869-a362-411a-8bc7-848eb01ce22b", "indicator--9475ccf9-bc37-4380-8e29-fba2477bbbdc", "indicator--c989a184-a38c-49c7-82a1-1a5aa4faf709", "indicator--75ce93ac-5dbb-439b-8179-ae72e6f7cd78", "indicator--2f20c85e-b034-41fe-ac40-4c176dac2e39", "indicator--3d5e1780-14c8-4566-93d2-82a83b8b20b0", "indicator--f8a09d59-7b68-45ba-9426-bbff01f10578", "indicator--2ec22c7b-3a8a-4aa2-9770-789c7742364c", "indicator--b3ebcce2-1716-4c91-97b9-820beef80e6d", "indicator--1ac00cf8-fa39-498f-b36c-7ab3df8308dc", "indicator--20102e88-79f6-4715-855a-645396400e8c", "indicator--78831410-51c0-493e-8838-c91e9954b4c5", "indicator--5966165e-0c07-475a-9b53-96bc774e63db", "indicator--e02ac057-01ac-4c6f-bb87-1870823e1d24", "indicator--4cccac5f-7190-42a0-8186-cc122a17762b", "indicator--d742b2fe-72e7-4156-9b94-a7ad5167d0ea", "indicator--0a181b2e-9beb-46f9-a536-59d95080bbea", "indicator--bfdf125e-da14-42b0-83c1-71b691ffd6d4", "indicator--ae147d6e-8be4-47d0-955c-e2c79e163495", "indicator--e8ae26b5-60e6-41e7-97fa-18343abc7df5", "indicator--2249c4b9-45ec-4c04-b4da-0ad5b7074fcf", "indicator--084fdf49-a245-41cf-9b45-ba4bfa57a7d1", "indicator--7e58947d-af05-4e75-bca3-47e5b308e70f", "indicator--ce7da1d6-be61-4acc-8f1c-4a2bbff692e8", "indicator--b27471d1-af6b-46e3-8427-69e1a562ec93", "indicator--4610bac3-1b91-4a69-81af-e5d5cfcf2ac2", "indicator--aade5061-9f84-4290-8751-317887b49023", "indicator--401dfc8c-0a0c-4749-b62b-edeb7e8f5974", "indicator--aeca5c58-88f9-4dea-989d-70ebe14e6c08", "indicator--8322363c-5866-463c-8fe3-60f0ddce2e0a", "indicator--cae5f625-f90d-40ee-bc08-ce99d8653bd9", "indicator--212248e9-104c-4eff-82a6-b93252a8ecad", "indicator--d0f00ef5-9410-403c-8978-730ca2dca759", "indicator--fec9d545-2a71-48c8-a174-b86a999e94ec", "indicator--a1ff6580-6934-4e9b-90a3-9244a82ca962", "indicator--7133d3cd-d17c-4184-bcae-e4a83c6935c1", "indicator--4c6f15f1-3423-45e7-9b7a-99eea067ee88", "indicator--97ce1b22-1374-4ad9-a3b4-93a3fb03e091", "indicator--22319fcd-a455-432d-af37-13df60c14c6a", "indicator--d59a61e9-e9f6-49ed-a99b-4c0c125661ad", "indicator--cd6faffa-65ff-4997-aa2f-60941e549d41", "indicator--8dc0d56e-5d8b-43e4-b5f8-c2a5b41a0006", "indicator--aa2dc4fd-2354-4605-bc07-118c09583845", "indicator--687b36ba-4112-4918-880b-4bb6af7f36bc", "indicator--30f1ac31-7cd0-437e-9778-d3f29fc1b2d6", "indicator--de370e78-d34c-4d70-a602-0993c1001e22", "indicator--e0a88604-9d15-4092-8b2c-c5a88cf92bfb", "indicator--0e1dbbaa-7295-474c-818f-c0b7e327d0ad", "indicator--ca0aaa89-c0a9-4404-8af3-69a6d1628186", "indicator--0e8e6e5c-7b61-4dec-bc93-cd370867d66d", "indicator--def8f238-9b2a-448c-9711-feb8ace7d313", "indicator--e31e7267-6ec9-4df5-99aa-fbca589114c6", "indicator--2bf00b3c-7614-4368-b85c-486ee76c8b00", "indicator--8f86760d-1a48-4db7-b489-2f7588723b3b", "indicator--08ef5595-fc0d-4a48-b86f-b55fd7ea4bd8", "indicator--c8ba81db-7bed-452a-ad3c-d08b4f02f30c", "indicator--db8f79e5-1771-4db3-8d05-c45cdd24d2d9", "indicator--ea9bbba3-ed67-4a95-ac36-d34c5cab7770", "indicator--daba9a42-e899-46c2-9817-ac1367e1da18", "indicator--ed367964-86f0-4404-8095-0b51a66a47e9", "indicator--1d5b1849-ccc5-48f5-9369-2b11680f7615", "indicator--293c3b83-dc43-4641-a138-57c0c936a5cd", "indicator--897a76b2-8b49-45a8-8536-246f717fa49f", "indicator--e03c297f-15ab-4426-9d0f-10c7d8055974", "indicator--7b5967e7-3a44-4377-a8cb-e4de2cd10317", "indicator--648ddeee-1cde-472b-81a0-1da67f81ce55", "indicator--9e5ce362-adb1-40eb-96ce-2ef6291d8c2e", "indicator--a88f06f2-f4eb-445d-beed-a41510373883", "indicator--457ffb6b-43db-4d08-8fea-1efc315be0ef", "indicator--de13b397-ec3f-485f-a769-bcf45ec01139", "indicator--a1d45ec2-dbd9-4307-8e74-ae52426db4a1", "indicator--da577c44-c41d-489c-8340-d98062d85b3b", "indicator--db07aea0-ab6e-46de-bc06-85488b028176", "indicator--39953c15-dde6-4caf-b794-62e14f12d80b", "indicator--690faac5-67b9-4467-be88-aeb555d0c4c2", "indicator--72f262f8-4ef0-4840-914d-37fae31650b3", "indicator--3437fd61-64ee-4107-b39f-464235efbaa5", "indicator--bac3f9b5-bcec-46ea-8132-c9f006ae177d", "indicator--a2545bb1-0395-4e58-9b75-51c5912d7045", "indicator--cf8c6ba0-8aa6-4d0c-80fe-e77794ae4413", "indicator--7d0040a2-33f1-4711-b211-f80600805427", "indicator--b23e88e1-e6fa-4cd4-9000-9a48591c7fc6", "indicator--e3384bf4-5999-47b8-8f42-ba8b51c815da", "indicator--07b9ac61-a79b-456e-a4da-21d0e3859be5", "indicator--b4948c25-4d41-40bf-98f2-013bf0e71072", "indicator--11b7f8fa-2f39-4abd-a45f-8bda4f87aaed", "indicator--159e27c1-0a8c-4b86-87ee-f5089bf89510", "indicator--b12e822f-90fc-4590-8625-2e9a1b8308d7", "indicator--0e70ebed-4ba7-431c-8c85-5a77515f8177", "indicator--85fd68cf-4178-4814-bd4b-4e7c94fe34f4", "indicator--af85dacd-5aae-4902-8871-92381f61a73b", "indicator--38b62f96-62bf-462c-990f-f150aa3fe5f3", "indicator--7be61e2d-4bc7-471e-b4c5-f3c272b9b966", "indicator--39cb7b9a-5eab-44a0-95d4-07c14db814d2", "indicator--db4b872c-d83d-4969-aac6-def8cd36751c", "indicator--19014dca-0cf3-4a8c-92bb-ae20fa55df8d", "indicator--4b387a8e-4121-4041-8797-171cc671ea0f", "indicator--a8237fac-72a1-4514-9fb2-69ac0f6c577b", "indicator--4b27bf7f-e818-483a-8abe-1463a7819381", "indicator--0a5b6700-c60e-4e18-8603-d1dbb76dc4c4", "indicator--962d857c-4caf-428c-a24b-d4bb64685bdc", "indicator--72553196-4c71-4a65-b6f2-19706be17bfb", "indicator--66efe4c1-061d-463e-9aec-378c93aeda7e", "indicator--86140bd9-8a86-4391-8d5f-992bcab6544e", "indicator--202aea8f-63cb-4851-b3b0-850bd2bdb4e6", "indicator--e9846952-485b-4dc3-b443-ab27bb4651a4", "indicator--a616bc85-0818-4a62-92f8-ccb855c42248", "indicator--89a7f081-47ea-4b5e-9950-492e41543f97", "indicator--6dc2ade8-7831-4941-b544-f1e114ae97b2", "indicator--efcd1a5e-870b-46d3-b117-24074d64b591", "indicator--0069c130-dc2a-4e79-bbde-edd4bbce520c", "indicator--9004e31c-8131-4bea-8d32-bbf551376cdd", "indicator--4d9e5fc5-2fb8-4897-b5cb-c7aea1e34d4b", "indicator--23a2d76b-aa29-43d0-8193-43c9a7880c05", "indicator--5428a43b-4052-47a6-8267-1d822889503d", "indicator--58a0d5c6-e099-4708-81da-cd709df65150", "indicator--ff987c99-eb39-4d28-9a00-327368b4b304", "indicator--91f98520-dc3e-472e-b204-68f624aa3644", "indicator--296c2e47-f219-48fb-a7f2-21628ea67911", "indicator--0b65f262-1ab8-42da-8059-9ed3335abe3f", "indicator--689935a4-f1d5-48fc-be23-ac406d1a44b7", "indicator--86405965-0bf6-495f-8d81-4a5a74309134", "indicator--2498a26f-9294-48a2-9a14-2bf85a3f406e", "indicator--bf9af67f-3054-4aca-835b-20682fda4c40", "indicator--45b05176-8e06-410e-82f6-ab3076f90c14", "indicator--16e0f9ac-9848-4718-9bc7-c40a146d018e", "indicator--8c5eefe1-8012-482b-a6d6-6533d5627e77", "indicator--911d1e28-82d8-4a01-8b80-7074c23f4259", "indicator--f0ea3a52-a543-4a7d-a73f-c0c4522fc6ae", "indicator--a0fbeeeb-800d-4f04-b6f2-8fd89548eabd", "indicator--3f168ad1-5c4e-420f-8a9b-a96a108896d7", "indicator--789982fd-fbbe-44c6-b376-5c5043d964c5", "indicator--ac47df07-0dfc-442b-9122-e2a8bf6acf8f", "indicator--de719268-849c-4136-8e08-12eecf9f07c0", "indicator--c09914cd-68a3-4974-89e9-64fea61d9f0d", "indicator--65a92cb6-73f3-49fa-83cb-188b003122bc", "indicator--b2075308-7b35-434d-88f5-e9aa5c2af772", "indicator--3a76b7b2-2fe1-416b-9961-4befeeb7dbfd", "indicator--516b7ade-071c-4ec8-a561-a3745ac658e6", "indicator--63bc4133-e183-4c63-8900-7429b09626d7", "indicator--f2d812b9-2c66-449c-a3d8-af6779b0a94a", "indicator--dd8615e0-2aea-4147-894b-c535c3a003f2", "indicator--feccd79c-c65b-40f3-a831-f4af52afcf7a", "indicator--c268b8d0-bee4-4e18-b260-19acac5ed314", "indicator--183764cc-8364-4336-b5e6-1e8d6835f0b8", "indicator--75a9dabd-1077-478a-b634-86668cdc02ae", "indicator--70530bd4-a49a-42fc-a3a5-616912193766", "indicator--73c05887-25f7-4741-8604-b1daa187651a", "indicator--d7fc5cfc-dc8b-41c2-9684-a04d34676a76", "indicator--af5547a7-9b6c-44e4-8c24-dd6057c587eb", "indicator--5bfb7de8-8fab-4034-82cb-5ff48ace534d", "indicator--950a729d-f8e6-4ce5-a121-7a15738f1d31", "indicator--abcccfbf-92ba-4e3a-a7fa-0accab1a4edc", "indicator--c9a68890-f181-4fde-9347-1164d8062ba9", "indicator--e9afaf3d-2cfc-4f0d-a96f-0f263d64c10f", "indicator--379faf82-44b7-4bf1-99e7-bfb01b129a8b", "indicator--7c87d1c4-9274-414f-b0b4-7192e6a1a5bf", "indicator--48d120f0-06f3-4ffc-a338-6eb73e736f13", "indicator--a20ff63c-3134-4d18-8787-55e58af03777", "indicator--32d1601a-a87e-4338-8729-ac55b4733448", "indicator--8deec469-b3b9-4029-aca0-6eb97b966549", "indicator--227645a7-dce8-4b01-93b3-93b20fc480ce", "indicator--c991a1ab-7a33-433a-a0e2-a529a34332ed", "indicator--bc83e410-a442-4b52-a48a-610ba8633eb7", "indicator--7d0b6a57-cdf6-496d-91b3-61e0ad5f8a9e", "indicator--8aa8532a-fdeb-4614-958e-acc7a1c01262", "indicator--faf5812b-f66d-4be6-a2ec-ada9f2d4ef8b", "indicator--a251c73c-d7ec-4b56-8c0b-3c216e6fca2f", "indicator--8248b0fa-7425-4a01-af00-ca403c86cd10", "indicator--6932c898-2f25-4325-b0ab-011b7b39174a", "indicator--d6639a4c-e027-4f15-9639-d6a78999af0f", "indicator--40e6a098-b3f2-492d-a47b-e361c91667ba", "indicator--d762ab91-a57b-4fb2-a83f-c40d6fd9b2ea", "indicator--b0ea5bd6-ca7a-40c7-8060-6ec63ad1986a", "indicator--3e196196-1454-4e91-8277-7df2a4d6d9b5", "indicator--410c55d3-4f14-4cb4-a350-799386f55627", "indicator--2ab6ac4e-634d-45ef-b8e4-b33e30da8e77", "indicator--b3d76c82-7260-4641-baee-97eaf97bb0b4", "indicator--46ff0631-c09e-4b36-9b9e-b8b1f6c3bc16", "indicator--0769451d-ac5d-4709-b66d-c26f0f64259c", "indicator--c76dee4d-84ae-4015-a22a-96a956132bc7", "indicator--8d34aff9-4781-447d-9828-3af3d7ed1c5d", "indicator--8d2a2733-c2a5-44ac-8d76-ce1efe38bd76", "indicator--3a3d2c95-b2ad-453a-b501-54ac194355e4", "indicator--083d71d4-f2a5-481e-b437-db4424d0591f", "indicator--6e4f00fd-1cf5-4861-ba06-ae2bb5703f59", "indicator--70eaccb8-ce98-42ec-a959-c4a22ddd7542", "indicator--922be6a7-c72e-4520-a0a2-277f9e6e9d7e", "indicator--4bd19016-e6fb-4a48-aa0b-2054442dacaa", "indicator--39a08d8f-2af7-4dd0-835f-109e8451a910", "indicator--abf58f95-3feb-4e41-a2a6-b132143063c4", "indicator--ae03b8d3-4447-48f6-a0bb-18e065645070", "indicator--835afbdb-459a-4a9e-8154-96bcd26049b1", "indicator--6e19f073-f0f0-46de-9128-82189446912d", "indicator--ca1ceb89-f81a-4024-ada2-7e998a7751d5", "indicator--2df092af-b288-49d1-9bd1-de8e5db805ee", "indicator--e024f6c6-ba7f-49b1-a5af-86d77f7cfa9f", "indicator--454c2221-fef0-490a-9dff-2b45bc789582", "indicator--69fc0c45-23c4-48dc-9f0a-f05889cf841f", "indicator--be99bc2c-92b1-43e3-a267-d4b8d974a006", "indicator--6a0476bd-83b2-40ff-90e2-2bcf1d079899", "indicator--373aa8bf-6e5c-4de9-a653-592944a3622c", "indicator--d37043ac-6c57-4569-9412-9a9eaf9ae011", "indicator--e96f637a-f2e2-41f8-ad9c-cb9de18c1afd", "indicator--310f4e91-2da3-4f23-8b0c-f73586b80454", "indicator--9d529dd4-90fd-469d-90ed-c6bec786d639", "indicator--4b541b5f-9056-43b6-92d6-8cb17830d690", "indicator--c4d38a67-41cc-4844-8246-d15221751db1", "indicator--7e84c084-fb02-435c-ae97-c4fbd617c8e8", "indicator--a524d581-eea9-484d-a2e0-4a141d746171", "indicator--839a396a-19f0-40d3-8f05-8c2764b3aa9c", "indicator--2d61db52-918b-4f80-94c9-d289ef97481a", "indicator--da731a65-865a-48ac-bc88-7a1b51b0f280", "indicator--d231845e-c287-454d-a11e-7f7218e22d50", "indicator--5844ea98-5660-42c0-8780-94a2d28fc995", "indicator--10ae70b8-4b24-4fbf-9a80-28b36a720923", "indicator--88c278e9-f7a6-4aeb-9172-eaf668d3c1eb", "indicator--acba5ad2-2a57-4c63-b74f-b743fc383cd5", "indicator--d386c2c4-c278-4206-bb90-962efdbd5de9", "indicator--2e826176-d8cd-4696-9cce-983e34a7ac9d", "indicator--a40c21dd-78fa-4ee3-b042-7bdca1f97736", "indicator--bd6ab8bb-43f9-4ae4-a3e2-90d2e2918580", "indicator--52717ad0-2504-4db5-b586-4ba7788c5b22", "indicator--76906cd1-829e-40b0-9cb3-b8a09f882ca0", "indicator--aa0316a4-240d-4b67-8d7e-01be50e0f36b", "indicator--fdad7970-5d6f-45fc-bada-6595efeda4e3", "indicator--8c1ed3cb-00be-43fd-b802-8b85a1667985", "indicator--507017b4-713a-44f6-bb24-7ccfa2a0a795", "indicator--adcce520-936a-4884-839e-6f26ef084c67", "indicator--0a60eb8c-c973-4b4b-9637-b708ecc5bc81", "indicator--1506584c-afd0-48a2-8594-cdda8b2fe867", "indicator--ba7de3d4-901b-4704-9502-958c6110574a", "indicator--9ebe5e80-407d-47cc-9dcf-989129c12031", "indicator--2c251dca-202c-4a54-96c2-7e7ade3be266", "indicator--937521b7-41a1-46bd-a4be-bd0f345ddcf9", "indicator--bc5ba801-0443-47ee-9461-42756ae2a346", "indicator--c5466be8-da16-438c-8b17-2b7b99f6f532", "indicator--cd165650-54b3-4d29-9314-ec843e66161e", "indicator--2ce9e080-cf4b-4792-854f-8bc1549e97de", "indicator--3be99d9d-0126-4554-ba6f-7e2792a952de", "indicator--b8067cfc-2f7d-4007-8b6d-341eab9e398e", "indicator--fca36eb8-706c-42de-ae8a-0baf5b546308", "indicator--b2d7e239-1919-4aed-b302-8877895ad714", "indicator--5cfab630-3723-4219-9f7c-1e570dbaa8de", "indicator--6c7e0387-f511-4046-810c-be5ecb4fec9c", "indicator--9a6d8d6c-c1bb-4796-8112-8392081d675f", "indicator--da3bf800-f1b9-4bc3-ba37-78eaeabb88ca", "indicator--c4c25d33-f517-4a53-99f8-da11b2561726", "indicator--e5a819b3-ade3-4d3b-a635-85f8f42a6da3", "indicator--3f4e8444-96b0-4e4a-b6c8-da33064f8c01", "indicator--83420005-8f38-4f6b-8907-8a5732bd9002", "indicator--642e2393-7f73-4242-b9c8-e306a7f5a711", "indicator--bb9c8292-f475-4ead-accc-ffdd6ac7d510", "indicator--3731286c-5620-4555-a7e9-4b672538e652", "indicator--a0029315-5ce2-4e72-a41c-b59d0ed4342f", "indicator--774d57e4-d09b-439c-9c3f-868fa4d8f4c9", "indicator--1595dbfc-55ff-4dfb-812d-042ca9177566", "indicator--7c24dc95-79aa-4602-bd25-af42ff1b9d94", "indicator--062f4799-4b98-4a12-be4c-60441f1b9aef", "indicator--5a5ce776-0e5e-46a0-8db6-ec80e552e870", "indicator--733b666f-3023-4174-813a-d4d49e968268", "indicator--ad4ec4ac-edcf-4ab9-8645-b79f5826b3be", "indicator--e6426e5e-e890-4a9e-944b-284a52be0c88", "indicator--803d573c-81ab-4244-ae25-27bbb2e8bb8a", "indicator--67995fdb-8dfa-412e-ac10-660474e9bdc1", "indicator--01c35d4e-05de-424e-9be8-dc27286bdf4b", "indicator--911a02b2-13fe-4c9e-8185-aac27e3400f2", "indicator--d1569487-9c8f-409e-905d-30496bca199c", "indicator--8d4491eb-dbe5-45a7-82f1-27230fa69e7a", "indicator--46a4974d-a73a-4bc6-a28d-cfa3a4fcace4", "indicator--a65aa48a-3a1a-447f-b147-7587a0540a6d", "indicator--854d52b6-44e1-4b38-85bd-780cbaeba5f3", "indicator--59d56574-66c4-4bec-9407-1adf2ce179ab", "indicator--e5452633-b815-4bd4-969e-18915431151d", "indicator--d20744cd-840a-42da-b206-41a293e1ecf4", "indicator--7d1838a0-50ff-4950-86d9-10618bd955c7", "indicator--ea06ad92-4e59-4dd1-bfa2-8c700bdef875", "indicator--89b798ce-436a-4b3a-be7f-da8f76ad8350", "indicator--7d102f3c-acea-4703-825f-24917b6aa143", "indicator--77bbc5e1-b8fb-4410-a326-d476fab40d2f", "indicator--be9f073b-19e6-434c-8539-7beddd113c76", "indicator--069a3776-67d0-4aa9-8d38-524a2415c14a", "indicator--f4530284-9b0d-4a2d-b94e-1c0829de1796", "indicator--aae30ee5-e91b-43a1-8966-d1712ba8c051", "indicator--d737c134-0344-43b7-8782-f4497213ab03", "indicator--98a2b31d-fa10-412e-87a7-2f7db7b9f56d", "indicator--aacc2543-e9a2-4d0c-959c-289d0418833b", "indicator--2a4eea6e-cf36-4a1c-8b00-1b4002baddc0", "indicator--357c1c97-466c-4404-bd48-9b14cb039f7a", "indicator--6ff227bf-a834-4d4f-a441-a6ac549cbb29", "indicator--f5333edf-75e6-40a1-b823-066413e17abb", "indicator--1f54156b-0d34-423b-b464-1ea0a6ef7a9a", "indicator--8f9d60ee-1117-4f01-a803-650e2070962a", "indicator--a7bd9d59-aa1c-44e3-8485-8d8c35008b06", "indicator--8cae7bbe-eb28-4c9f-9d2f-2c9795324b75", "indicator--f3aeaa40-b085-47dc-9110-4b18f8297e04", "indicator--53691f9d-04b5-4cd5-8e07-545657374c57", "indicator--147768ea-dbff-470f-a172-c4e79d760530", "indicator--5306b4dd-8981-4391-9908-4544bd6ee878", "indicator--53da6cd3-4bf5-4983-9c36-1e3053249a31", "indicator--04d705aa-ff63-4afe-bd38-befb38b0782d", "indicator--73dbce2d-8caa-4dc9-801c-c63c18f6e6ed", "indicator--b1ef7dcd-5174-4838-bed8-d413edf8504f", "indicator--140970cd-9518-43b7-a789-3dbcf40dc1ab", "indicator--107477a9-f058-46e3-8b18-9126c1bb7c5c", "indicator--e7918333-22fd-494f-b42a-0085c66d4631", "indicator--ede25b03-771b-4bd9-868c-e3400dd6f248", "indicator--c18b8676-a455-41c1-b12e-caa6c0f5140b", "indicator--84f40c78-b8f3-4b56-a085-86bb8ac1b3f9", "indicator--3ec72d4e-6ed0-4242-8d9a-685bf528c42e", "indicator--9efb2b74-1bc9-4c47-afe2-e0ad9e88109e", "indicator--0a6a454f-89fa-4f08-8aa8-ef238ec43586", "indicator--3e39cd51-db4e-4bd8-86a3-36363af48ec3", "indicator--e54445ea-9b15-4568-ab89-572a166708d7", "indicator--c086c2da-d746-4c1f-9613-a06d6b0a0559", "indicator--4c2ede06-ecd3-4e4e-9e3e-40eb336c6a07", "indicator--9b04b18d-1707-49e5-a15d-ce4bc69741a9", "indicator--5bc5964e-3dd0-4c9b-a798-0c539dc612f4", "indicator--c4a2f148-c525-4993-b506-9db63b5cd306", "indicator--b21cc6f7-eccb-4f1c-ad00-0026d3b96d4b", "indicator--22cf890f-b181-4917-a598-607ca83de37b", "indicator--0bf5d075-12d6-4ab9-bcc1-ad9f0c17eeb6", "indicator--11e4be3d-089f-4d9b-8e18-9b43fda11c0b", "indicator--f05a8bbc-a840-45f9-8efb-b2db7e30bc2f", "indicator--70239443-d303-48ed-b49e-f979c271e864", "indicator--ba97ef3d-d622-4874-91e2-98355e10b546", "indicator--d520d786-4c3a-4372-8665-26053957f3fe", "indicator--32b93cfb-bd96-40f2-b2d4-45cd1302ce8c", "indicator--7989ede3-3b36-4e92-8b8e-68b959f0c625", "indicator--1c8078e0-2aa4-4285-af65-afd8deec7e01", "indicator--2cd794e4-8a8a-477d-88ba-dd1aef24844a", "indicator--fbf817e6-52f2-4316-92ba-8bdd9ab93523", "indicator--26071f89-571f-4642-8792-8a2856d86777", "indicator--4381d7c6-444e-49b0-b6ce-44144937cb6e", "indicator--6415c55b-765a-4614-abcd-b7d822576be1", "indicator--949e53ca-3cf4-467a-a956-345bdf9c16fa", "indicator--99f0d868-55f4-49bf-ada1-92883b2166c5", "indicator--330ecab1-9d8a-46fa-b51c-3bc3114ec3a0", "indicator--12e64d36-c09d-4bf6-b9b1-6646f3ea56de", "indicator--5c592a01-11b4-458e-bacf-b2c89b187def", "indicator--4f37ae8b-10ae-4a74-9785-083105e74460", "indicator--615b70f5-941a-4fde-8f09-72c56c1ab25b", "indicator--fa93f51b-b5e2-4f8a-8c87-0653b0e6b181", "indicator--6f0ea391-6013-4ed7-b753-f640ec4b54e0", "indicator--e8ee84d1-9ec7-44ee-b994-820ad262d799", "indicator--41e1ccd3-66b5-4fad-8f96-af593b3c65ee", "indicator--d588085e-8e1a-496f-a48a-5178080df199", "indicator--44f7fe45-d520-42d2-9474-13d9bce98e09", "indicator--370be153-e344-4fae-a206-a9927a550234", "indicator--b655319f-8224-4912-b017-2bf10b6cf0e2", "indicator--67c2c9cf-752a-40c3-a5ea-bf3526d518db", "indicator--74f0a8b1-d1cb-4bc1-b93f-834846d58f4a", "indicator--44197b9e-9a57-4620-8e2a-e1bd4972c5c9", "indicator--b0560712-9d7f-4704-bc6e-c7fe11ee52dd", "indicator--eb86e281-c22e-4300-8434-66e5959f43d0", "indicator--2176a736-c243-4a21-b74f-c2c9cded3fcd", "indicator--0ac9a7d1-af5a-4df6-9e8f-306df38b75f1", "indicator--57f3761a-5c61-41db-b64d-1cadd14ab722", "indicator--ebb524cf-de2c-493c-9edc-e6c440eca5a5", "indicator--129c74f8-33d7-487f-b673-f2449f2a00cb", "indicator--6447f70f-862e-4321-8f2a-90a0ffda772d", "indicator--ba573102-cc77-45da-90b2-0d8174d684d9", "indicator--f8c5f815-a96e-4166-963f-9853cf784f3e", "indicator--8138250a-ee10-45b0-a231-88ada457cc0b", "indicator--05267d8e-5366-4c41-af0f-dd723ab10d12", "indicator--998d0d07-296d-4104-ac44-4e7207cb5fab", "indicator--68a2b2c1-7dd4-450b-888d-76c4891522cb", "indicator--bc48fece-c8d8-4deb-9282-15842d608d48", "indicator--4afa09ff-d75d-4f15-bdf0-422d89517d86", "indicator--b8dc97be-debe-492d-b8af-e2e8cfb653fa", "indicator--5b1897e2-6dda-4e54-8d3e-48388a737dbb", "indicator--d9dfb4fe-b912-4e7a-8549-b38d08cd3f9f", "indicator--37bb0c0b-1695-4758-a6de-83e99b57a941", "indicator--025af6cb-568f-4281-adb9-6661b6b86ffb", "indicator--37fa6de2-2592-4064-b03d-2494c45d1e0d", "indicator--5a80ca99-c67d-4893-8f47-522e4934f380", "indicator--469e0495-30df-42c1-9d4f-25f87851822d", "indicator--a60476a7-eea3-4126-87f0-38de9c5eba70", "indicator--b7eb1c29-3da4-47b0-af82-36003f3d9553", "indicator--7e192833-70e8-48fd-a302-7ef45382107e", "indicator--40987b5c-f445-423b-9207-de1f292b4b07", "indicator--26243781-9b7b-420e-8272-677f0bd474b5", "indicator--04979032-63a9-4261-b7ad-be756a86f275", "indicator--39133f89-e13a-4d02-9e09-d628626cf7fe", "indicator--0d097a64-0a75-42f1-97f1-06352e7286b7", "indicator--789b741c-4317-462a-be12-15d7d6f9b9de", "indicator--4bcf936e-b09c-45d5-b09d-da1635ba6b4b", "indicator--e9727311-699a-478f-90a4-0141ce2f588e", "indicator--81ca2cfa-0de1-4eec-adeb-a331c517f59c", "indicator--c9e0e1b1-20a7-46aa-a58c-1b22cd557b7f", "indicator--4638e0bd-259e-42cb-8f26-31b0a0ebc654", "indicator--39921875-5311-419b-821b-d98cd8994cb0", "indicator--bad38a14-9037-4b90-9ca9-68ff6987ef35", "indicator--56c70c0f-c00f-4046-9c2f-a20c61a896e0", "indicator--35d124ed-7a0a-404f-b044-0d0e49a7c89c", "indicator--5cc013d6-7a2f-40d0-a768-1ceeca4cf767", "indicator--c50601ae-dfc1-45e9-ba49-44eb70cc4373", "indicator--22978bbb-3baa-4bc7-9f9b-5e6a593abb17", "indicator--23c3093b-cfeb-40f4-9d90-fed279c0594d", "indicator--a1cdcb7e-d1c5-425b-849e-3c7570a85a9b", "indicator--f884d934-33e0-4c40-9b80-80821935e359", "indicator--bfedcced-9949-4c69-a808-3b900f2d5d9f", "indicator--c7a1035c-a0c4-458d-a208-b3591658e407", "indicator--ea4d77ec-d091-429f-8aa1-7a020c68d5e8", "indicator--dbc97f55-de43-4cb0-8eeb-9ba6f1fe19c8", "indicator--e46ab1c6-aa1e-455f-8fd6-b5e962cecff6", "indicator--6d7a2731-246a-4c48-9fe3-d0b979699643", "indicator--2b851c55-dcdd-446d-a463-4bbbd421aacb", "indicator--657a2ee6-2c03-4779-96b1-1f82fb079f99", "indicator--c7a771e6-5fcb-42ec-b317-4c42697109e2", "indicator--69dd0e43-6152-438e-affd-00608ad6ef50", "indicator--20b925c8-c401-48a3-ad2a-ff5284605a2f", "indicator--aa375053-4975-4bff-9093-0a9461716e02", "indicator--12c426db-e562-471f-b355-d21f028953f9", "indicator--8fd5ebd0-a09a-4e9b-9da9-533d7753e0f7", "indicator--8fa44523-8eeb-43cc-8910-c70957d76330", "indicator--eac3a9e3-5c19-43c9-a55b-3f955de3e865", "indicator--8433b56d-3ac3-4c8d-ad64-851be781914d", "indicator--7d8c27fd-1442-4f3e-9b80-a291be20f592", "indicator--d660bb26-c588-475f-9ca9-02a8e2b0a463", "indicator--b04b6a05-f35b-4e72-965d-b09a7f2d6861", "indicator--bf21cd8e-0471-4d7a-a0b2-016a3dddffa0", "indicator--0350fb01-1d69-4255-b4a8-4a57648246f2", "indicator--5461c340-e820-4a71-afa8-231064eb51f8", "indicator--22b4c30e-f0f1-4267-b4da-d9f2bc15518d", "indicator--c81cfb85-5e2b-4d04-966f-f89d3cb9f182", "indicator--45ab18b1-21f1-4d93-bd9f-4d6cebc03389", "indicator--2e8301c5-31b7-4a70-8fa5-f9a22b033f3b", "indicator--21f0b8d7-a52c-4638-b23e-facb14860b94", "indicator--f0f350d7-16cb-48ae-b09d-55a5a356737f", "indicator--eb3468d3-2c25-44bf-b422-bf418e02bd11", "indicator--acf98a83-fe75-49c4-b82f-1a327251311b", "indicator--4e40d844-008a-47a9-8802-ec25b4a6d3b0", "indicator--d601baa2-4579-4bd6-807a-fc15f86f75be", "indicator--f4775bd3-4a14-43d9-b02d-c20f5143e1e3", "indicator--a44a0d1e-9161-4ab5-8764-de991591d233", "indicator--0709cb97-1b47-4677-8f06-a5f94f59291b", "indicator--921e32cd-8bbb-4567-bb61-2783ffa35bb3", "indicator--8ed3f9f8-8a31-4353-9a1e-c5b78f0ca8a5", "indicator--17c39d34-562d-4ac2-a0a8-2f55191a5bd4", "indicator--294380e1-2b03-465c-be7e-5d96f4d66dd4", "indicator--de1bd799-2faa-40ef-beb4-8df673193c00", "indicator--3e253c28-661e-49ce-a557-d97a45969fd1", "indicator--e7706f32-5361-43ac-bd58-e76b2323578e", "indicator--07bce49e-7453-4c00-80ad-0333ea91fe7d", "indicator--7f358687-1ad0-4ee6-a798-5f390ea8f0b5", "indicator--383da9be-2deb-481c-98a1-5a4edca02942", "indicator--f72c4f28-4abf-41fb-bf71-7f013fad1839", "indicator--d7c55bfc-a554-431b-9dbe-c4e1f0e813d3", "indicator--c21a45bb-c1ef-4811-abc4-da754cc44b0c", "indicator--1728582e-8630-48d7-b2a5-5555e1a33e0a", "indicator--a133afc4-025c-47c4-b4bb-6fce8f9c0398", "indicator--d26172b5-fb61-4b16-bbb8-bb83045c8c06", "indicator--595fa802-1077-428c-a010-3fb87ffa6c99", "indicator--d82569f5-f0b2-4270-a290-107eab995330", "indicator--28085994-6c9a-4dad-bd1f-f3cef2f2b298", "indicator--85fac571-cd5f-4b5c-b0de-8a8a9cbd15ae", "indicator--ce4747bd-9f33-4130-aeb4-3b44f7fe152b", "indicator--49d10ccb-822a-400b-a383-51b306759bc7", "indicator--3764cb62-0167-4191-9d6f-ceff585f50f6", "indicator--73590669-9bbd-4ca8-ac48-7a630d055ca0", "indicator--7db134f2-915f-41db-881c-f85c49f20f9d", "indicator--83646301-89d4-4576-8203-d2549efab8cf", "indicator--ba5e9069-7701-44d3-8d6f-65d20881190a", "indicator--ed0c0578-4adc-4aed-8973-9d06a5b90651", "indicator--a489bfa2-fbfc-420b-91ad-ac98f334f0b6", "indicator--d06c58ec-c785-4972-9baf-be9f269dd907", "indicator--4dd39d88-48bf-4a1b-8caf-bf137525d4a6", "indicator--49c648b9-42fe-4638-8c5a-e80aa69aa23e", "indicator--1b8f79e1-c8ec-4a12-8943-ae5f49bf40fe", "indicator--60eb3f7e-32b5-410c-9521-b10daed16246", "indicator--0e91896f-6a89-42ac-8166-f1ca2afb0c10", "indicator--70c6b159-ced0-44d4-846e-e0836b7021a1", "indicator--fb823751-c13b-46b6-b7c5-771684f68544", "indicator--1bfc62a7-9322-44e2-9631-fb1816d1476e", "indicator--df7104ad-6185-42b4-922a-43f31b78f50c", "indicator--308d3fed-4e14-4f06-836f-99cad376ec05", "indicator--99be1c51-9656-4360-bbb3-38eeaf438b05", "indicator--1db59c5a-3110-4aec-ab85-936fc1b62086", "indicator--00cb7615-54f7-4ae2-9f60-0776b6cb2d07", "indicator--c3954b5b-f48a-49b2-b0f7-902405575c43", "indicator--e2db8665-b652-46dd-9f79-21ee8baf7225", "indicator--88d7213a-9c84-46a9-9ec4-98bf178e17ca", "indicator--190e0fef-add4-473e-9b95-8dfb9d373c08", "indicator--f4d725a5-cf31-4d34-99c9-6d2692249df0", "indicator--ed1d72fa-017d-4b61-a2ae-ef49c891ece7", "indicator--d0c37649-db09-47bb-a984-23ccafef9212", "indicator--fc166f61-d254-4d07-baae-876d72d85bc5", "indicator--304161fe-808e-4e4b-a075-5929126fa1f7", "indicator--d8419335-9486-45c7-bb0e-1317cad3a28a", "indicator--d49453cb-cb1d-4664-894c-e3a52b7d0eeb", "indicator--df58f9a0-d51e-46ae-a5f5-1664157e7b49", "indicator--aca02c61-408b-4399-abe5-580b67c96469", "indicator--a1bac40f-3277-4686-bb3a-744a6eabcdcf", "indicator--20332474-027f-4475-afda-62714d0f22a5", "indicator--79153608-f012-48c3-a29c-3f08eb1a5c2a", "indicator--d3d7681b-e233-42b6-80ea-901b71de5ea9", "indicator--16263fb8-4364-43d9-a37d-8c0d4decccec", "indicator--e41972e9-fc40-41e3-8523-8e2e3361f63b", "indicator--dd1efe68-6178-4004-981b-24a16ededae8", "indicator--38e8d4e7-b795-4794-8340-584440bbb2de", "indicator--a49930c6-6ea8-486c-8f77-0f9e933f14f8", "indicator--74ac97ac-4517-4c88-8d0d-5b0fb59486d9", "indicator--e2357d31-74cc-4a5c-b32c-878f8f40caa9", "indicator--e7310b9b-772d-4e6a-937d-8fbb4bd48a4e", "indicator--8442dc29-ec8c-48bb-a46a-cbd410e91e89", "indicator--85a5125c-983b-4973-ab6b-4c47d6346b4a", "indicator--6e536c4f-ae0a-4ae4-a592-0fd1d5b6d01a", "indicator--c67901ae-d6a2-4722-92d7-cec6b11ae9b8", "indicator--d15d05f7-ca04-4b0b-9b5e-195e4cfe6d66", "indicator--9d847bff-849b-4ed8-bbd9-fa9131715c10", "indicator--15553418-549f-4f56-9456-2555dcab3791", "indicator--2e3b0e24-23a1-4e3d-9f02-2b0d57bbbcc1", "indicator--088725a0-4e70-4e5c-b5ed-ddc7e70a6097", "indicator--0d41d21e-a943-4f8f-babb-bc2b4d6731db", "indicator--99db75fa-966f-4c13-9a03-0ab3346c9f5b", "indicator--f92be4e4-730a-4aa0-a66e-7b1cd978dd64", "indicator--1636d0c6-4476-48b3-9cf6-ed39bc27c176", "indicator--ebe2e460-e0cb-491d-bad1-304854951f73", "indicator--f04be0e2-0e76-4992-90b1-dbf5294811e7", "indicator--2218527f-77d2-4a4d-9c39-b1713fb93c00", "indicator--6172ad3e-e636-4780-a77c-6ad3271ea560", "indicator--d689c017-35e8-4163-ab34-615078e61149", "indicator--bdd13c30-5639-4737-8b91-547185eea7de", "indicator--a642cb4b-8d80-46a9-90fc-2232ce5eaa94", "indicator--c7f12eb7-43b5-46be-9e28-c8b45ade7737", "indicator--496ee2af-7b5a-46d1-99f4-0a8f21087b84", "indicator--540fe1a5-8a0c-4c73-942f-f50dfbbd558f", "indicator--607b670f-b84e-49d1-991e-b6398c2341dd", "indicator--a75919ff-6fb7-4392-aba0-36befb531d2b", "indicator--283d5198-7dd2-4d92-b634-7ad3975aec94", "indicator--ca723f9d-84fd-449a-bf2e-bec9b94479bb", "indicator--6ca7edf6-da01-4414-8312-b6f15e3b03ad", "indicator--c1d547c8-1d99-4084-824d-5c9d13ad7375", "indicator--f0491730-b05a-4bf6-85eb-cb7e94449958", "indicator--3feb073f-e88d-4d78-b274-d49158eef50e", "indicator--4f97a871-be6c-4516-8a35-1b7bcd8c01e2", "indicator--ab9dd47a-59df-484d-9797-926a196b1b0d", "indicator--aba02350-9331-41ce-9f60-50e5d26f5b4e", "indicator--0069fa88-b577-4a27-9731-50dec429a06d", "indicator--1214ce8a-cda8-414f-b6d7-ee84e83d0750", "indicator--400021b1-d19a-4033-981c-f13112bbcd92", "indicator--979c394d-4931-4c09-adc0-ec143be45d0b", "indicator--ca689f55-f175-418c-84ec-2f844fe9c1d4", "indicator--0facdc3c-575f-4473-bd7f-09e3ff75e535", "indicator--c0346424-63fd-4013-a81b-e72c266621d1", "indicator--6c2ba3aa-6a78-44fd-ab1d-fc1bc66efd7a", "indicator--83b9dd1f-42b7-4ea2-879a-5931db172563", "indicator--40f0865a-0e84-4396-b39b-3d84842f4df1", "indicator--01209c54-f3ad-433a-917a-64734e4be711", "indicator--82cb4f09-cf97-4cb1-8a40-dbd37ca9f033", "indicator--32c7986e-a47a-47f1-a0ff-b0e0db5fff4d", "indicator--aeed9701-5f45-4519-a6b6-75e7d375b9a2", "indicator--7bcedae7-3ca3-46de-aa7b-96dcf52a09a6", "indicator--366f263c-52d9-4c28-a572-ee26b70e3b7b", "indicator--98833216-60dc-4a34-8ae7-ec5b32061a0b", "indicator--b2c2ca8e-32a0-4bca-89b5-c0b03f99f8ff", "indicator--53339887-4f76-441e-a596-e3f68e787090", "indicator--ece33692-e3f9-4b59-b3a8-9f112adc2851", "indicator--a1992fcd-a727-4767-989e-dac8e3c0af61", "indicator--3e2af547-46ce-4bfe-93c6-a450b94488cf", "indicator--16434e05-32aa-4940-af68-b20eaa149e51", "indicator--99ccf9d3-920f-4db1-855f-afd0c41dea21", "indicator--8be8a247-6176-4f54-9468-4c61a47a11bc", "indicator--6ca163e3-dd0b-4a84-968b-3fecce53b70a", "indicator--62ad81b2-eb97-4734-b337-d3ce2fee22dc", "indicator--ced2a9f4-9008-42e5-85b6-9f2829885c90", "indicator--47c70db3-0844-41d7-92c9-ef087bc576c7", "indicator--cfb57b9a-d4dc-4bef-b954-b90c9392c352", "indicator--0d1a1467-ceef-4422-9b1a-b39dda8039fa", "indicator--0e0848ff-2d8a-47b7-a681-c258c9b7d7a0", "indicator--82337a00-9b48-4881-a9eb-e58d47acb19a", "indicator--5ffc3555-c5e3-44a1-be0c-b36015dac496", "indicator--c5ac6b47-a674-410a-91d0-0685a06b31a1", "indicator--a8694722-56b9-4496-b3f2-6555a347a02f", "indicator--e7877e62-22a1-4b10-9ad7-194bac41d68f", "indicator--98e45494-c999-455f-9edb-24dda3f39a40", "indicator--35b2fb71-1139-41cb-917d-94b658424917", "indicator--93c20039-832c-4ff9-858b-f0da545c440a", "indicator--7ca73ea9-1db6-4335-93c4-81b818a52fcf", "indicator--48868b14-90f8-4dfa-8646-11f92ba8bdce", "indicator--e8512669-6b8f-405c-9ecc-d2c72bc38e30", "indicator--487606ce-5ef0-4fc4-960c-03e4a261d5f4", "indicator--cb5c26dd-3cba-460c-b038-64c47e373769", "indicator--98f7fda8-5ed3-4f46-8dbc-fb0675ded801", "indicator--b676b07e-92b1-43ae-9475-e5f9747ed564", "indicator--100b1b0c-cc45-4d8c-b1d3-742114113a08", "indicator--a897fc26-fae4-4aac-83e7-0f88758f1b99", "indicator--25a094b9-3d71-4648-8a70-37ec862782f3", "indicator--19592be5-2cc6-4db9-836a-04c79f562d7e", "indicator--94cba6d4-df85-4f69-8a0a-c238ff3ffc11", "indicator--07414293-881e-4460-b4da-0e0e85b9f1ab", "indicator--69fecec3-21e7-42a7-8c7a-8113e2bc0e35", "indicator--ead61772-3f3b-49f6-889c-ce748d99ea61", "indicator--c44f85d1-731f-4901-ba89-14e7ccc34797", "indicator--0770a4c4-216a-48d9-9dc5-0afd0d5c7d74", "indicator--ce3c6937-f323-4f41-a95f-3aa33e2556e0", "indicator--6b9abdb0-7442-4f5a-b0ca-6704e3a1cce8", "indicator--b41148db-1faf-4812-a7b3-a6b1ef4df55a", "indicator--35d752ba-ed9c-4f8b-9e86-9ec5a39e753f", "indicator--ea8e44bf-8364-4cc4-8995-cfa8ad3c04e7", "indicator--e883e851-0763-46f4-9865-90d2101fa41d", "indicator--d6636aac-81bf-46ea-9db2-f35e24a9f449", "indicator--51c1fdb5-bd7e-48c7-b4c7-9916177b413c", "indicator--1b5b96fc-b2f9-430f-a3d1-3340efbd8a14", "indicator--2b5e9cfe-967b-46ab-b222-56e0638f04bf", "indicator--5fba3e4d-512c-4dde-aed0-eaae38018c3a", "indicator--e696a858-54c0-4e91-bf0c-7e2a4c22d2ca", "indicator--40731ab0-be4e-465e-936f-a1023a1847d9", "indicator--99c53d64-cc2e-4039-b036-63dea9e7e2f6", "indicator--bda8de6a-a555-4970-af7f-87e3256aa437", "indicator--c4a760a1-2002-491f-8b6e-455d4be6acd1", "indicator--b70e99bf-15be-4430-be98-24f615083e34", "indicator--d60d5de6-181d-4309-80a4-7dc18c7a82c0", "indicator--a1534039-87cc-4b9f-8c9b-3f1b08bcae43", "indicator--814eeb7f-e2ad-4326-a601-54a5a0e858c4", "indicator--ecb8fa44-6f86-4a36-a7df-695d240cec87", "indicator--f11fc197-5644-459c-a7ef-73737abcd2ad", "indicator--139c40e6-ef31-4b12-a0ca-796ebc99592b", "indicator--b5d97e34-e2d8-4d5d-927a-70aebddb8b29", "indicator--80e7b1f9-9119-4d2c-a9bc-a39d258d0bfe", "indicator--da210666-f658-4fbb-991a-e6f39e5b563b", "indicator--ee3e4299-30cc-410a-ae91-9a734fa45bc9", "indicator--13fed9f2-9bf3-49ff-8c49-a83e9e8de5e9", "indicator--1335b7c5-febe-4ae1-a806-3cced31b44c3", "indicator--07688e30-db13-4f7b-a0d8-aadd12f8fd50", "indicator--374d2a80-1301-4941-8b1c-c77e855b8bf2", "indicator--1fe396e2-d218-4751-84b5-9741c200a587", "indicator--a0b91705-109a-4a41-9d51-7f63f599fca6", "indicator--7775b818-f776-4520-a7bf-3d8d62a1c87f", "indicator--6c8fe244-c9ab-4891-90cf-e76cde90eede", "indicator--079f449e-8f8f-46aa-8d2f-b5690d048e42", "indicator--67aef5f0-d641-4880-8ba4-f5b097e85c4d", "indicator--d0e20cfb-aca9-4ac3-9700-e0794ac0c5d1", "indicator--10d64395-0292-4213-8c2f-174b729c6b20", "indicator--2f63370e-86f1-4584-9d42-2a99e2b2ba40", "indicator--23723f6b-b44c-4db6-8e2d-b7d04075b9fe", "indicator--c89699ed-cacb-4ac5-8356-9516eb1185ef", "indicator--9400e40e-6e7f-4def-809b-da23279d6970", "indicator--70b06a02-8596-41d7-ad43-f14ec3a96e05", "indicator--4c285f07-9c79-4867-b325-76e549ff68f4", "indicator--f80637ad-9905-48f9-83bd-90ab4ab41ce6", "indicator--94906cb1-af0c-472b-9feb-6b24cbb34a86", "indicator--dae9ab3c-6541-47e4-822e-aa0ed7732306", "indicator--e9ca3041-f07c-459c-86f4-f516d5178cac", "indicator--f8607bc1-69d0-4cf5-93a7-4ab0e5e603e1", "indicator--cccf3e8b-1b69-4344-b493-832bf382801a", "indicator--ed965916-9c58-4dd1-888a-7ca20323b2bc", "indicator--934b61e4-6a79-46a3-8c5f-77381ff9dd4d", "indicator--438c1280-bc0a-4a14-8ce8-8b9238deda60", "indicator--44f04e02-7dac-4600-ac74-4d2f8347513c", "indicator--61a22f8c-c42b-4523-a14e-2202c9df0e74", "indicator--dd3fd83a-4d48-48cc-b645-d5a47e40ce8a", "indicator--eac00c27-d5f5-4ed4-bd4f-792dfd47c54c", "indicator--f8743ce8-6ba6-4295-8a61-374b97c62d2a", "indicator--6528f839-1b55-4252-a8a7-c1439ca0f2e3", "indicator--182fac35-fbb9-403d-acc3-0c279ce0ca33", "indicator--7886a78a-0083-4cef-8e7c-a84039177ac5", "indicator--0fa688ea-f1f0-4f1a-9d8f-4728bea0d2ab", "indicator--977db999-d0c3-4f3f-951f-65377a7b7348", "indicator--f096d5da-fab0-4f86-bb3b-9137a0250b23", "indicator--d9f16c3a-8a4c-40fe-8429-2582e0c90b97", "indicator--dbb57462-307a-4330-b7c7-cbf280c95f1a", "indicator--30e9049f-5e52-44df-b5d9-b7df3e88a4a9", "indicator--26aae94b-22a5-43d0-8e80-2cb3e1c6e618", "indicator--4e8bdfdb-5f2a-4641-b77e-693e509df0ea", "indicator--fe43ff80-9f85-4c56-8df4-58be96e9ef08", "indicator--3cf931b3-3cd6-4378-bfdb-52302acb6e8a", "indicator--56b60c88-b55d-4d5d-baf9-bb94626eecd8", "indicator--9aae0141-1b56-40af-affa-47ff0e6360ed", "indicator--b51bd793-c710-468b-8b33-43b79ede5102", "indicator--0567b0a9-8b60-4eb2-89f8-637354413ee6", "indicator--a13ef7f0-4779-4e63-920a-660626d5f66f", "indicator--8b39d8fd-1c02-48d7-a081-7bb193935cb1", "indicator--49f6b25f-9b4e-4bdc-85d7-ca966152b5c2", "indicator--6781b907-f437-49d7-a49f-c1b7166b1feb", "indicator--218f174c-3248-488b-ad8d-248342739a94", "indicator--c91d183b-688c-42a6-a26a-531c5e2b5878", "indicator--baa3a4a3-856a-41bd-a6d5-963e49f3db5f", "indicator--66ac8f6c-34cb-4065-b7b2-ab4c334060f1", "indicator--19ede295-78a1-40cd-b256-84f813f1beb0", "indicator--1aa5e3ca-1454-45d9-94a0-886b161b56f7", "indicator--c103508f-4c51-4dd4-9c63-f933482c200a", "indicator--24a477e1-997b-41ec-ba7b-4991710413f5", "indicator--d8b1d463-1468-40a3-8652-fed4160bbd9e", "indicator--0ebcde72-b419-4f6e-80c2-a3c1cbfcb4d5", "indicator--e331895a-d500-4e73-a16c-875ee207696a", "indicator--cb9b5644-28b0-463a-8ae5-be3afc474635", "indicator--b1275bfc-05eb-4fe9-8d50-81c8a5dd0038", "indicator--1fe06dff-3c1d-405f-b79c-7f3b7a424b9e", "indicator--52671c48-d146-4cc1-bb22-7eec06c988b7", "indicator--d90e304c-657e-42b8-b5be-9c5b1ac268da", "indicator--72284aca-cfb9-4ea0-818e-41796af97098", "indicator--3adbedae-df20-42be-89c1-50bb9c4392e9", "indicator--64cffe66-7f22-4644-b6c7-92124b0dc33d", "indicator--924e894d-65c7-4380-a93e-63509e345367", "indicator--a2aadf5b-8033-41a2-ae14-66d4fc2f6d44", "indicator--bdcc0027-2afe-472e-ba3a-f6e51ee0b46e", "indicator--0733b25f-f8ad-4b07-8e4a-ba69f0bea26c", "indicator--298cbdda-9890-421a-9f6a-f9b007ba293e", "indicator--4a2826c3-aac9-4de3-be94-3805600a6186", "indicator--c4c228c9-566f-44a4-80f2-01ca3af17dd4", "indicator--969cd5c0-b669-407c-b6fe-3485fd4eb860", "indicator--df6d4ce1-9a1f-49b7-b31d-bfdc9212fb1b", "indicator--817b115e-9dc1-4b5a-90b8-e3b3707ad63f", "indicator--6a9ed1b8-50f4-4eb7-ad89-ed25f652feaa", "indicator--b9ab7f58-6869-4db8-804e-1e163c334f80", "indicator--ddd1f42e-ac9d-4dff-93af-0d5609fd7818", "indicator--b84e375a-f325-45fd-9a3c-969c94abea5c", "indicator--613d985c-c19a-4861-a954-217b2475c520", "indicator--7b3ce253-896f-4800-bcca-fed6296f15be", "indicator--ddf13930-c0c1-4e24-b6e2-c117a7913949", "indicator--25bfa0a4-1597-4dc6-8142-f1b31bcca4b9", "indicator--d87e27e3-2cb8-4c09-a926-847ff19cf7d5", "indicator--0d1b9724-e4d9-4f26-a5b2-9f589f06336d", "indicator--6c79138e-becd-4731-a480-6b9b61ffa561", "indicator--c35de79c-acf4-482f-94b9-7f4eaed99d94", "indicator--9eb19e40-81b6-431c-935e-ad616fbe5cad", "indicator--d1a84ef9-4bdf-46a8-8db7-40b2898fafdc", "indicator--3e2e3e60-94b1-4d03-9339-0e2800caeaf1", "indicator--19b1a17d-4ced-41b3-80d7-27e2c5126727", "indicator--c250a9c4-a200-4778-9067-4c6c20bfab83", "indicator--70d907be-e458-48df-845b-d501bb44ca4d", "indicator--c7288858-ae2a-4684-b83b-d18e6ae8bdbb", "indicator--7fa9fcfa-034b-43db-8a84-8fe32be2c2b3", "indicator--0e924f86-5daf-40c4-945f-ca9199eafefe", "indicator--7afcc301-dd00-46d7-9ace-64bce67c88fe", "indicator--28b0ddc7-322b-49ca-b1ae-d1b900237bd9", "indicator--bd554a62-7cf0-482b-b57d-b5e7f2cff2b1", "indicator--227a802d-e298-4e6b-ab15-f5befc7e06ae", "indicator--56b6fa38-aacc-41ea-b91f-c6858fd619a9", "indicator--5160857f-c044-4faa-b8ff-01fe54a0f3e7", "indicator--fc726a9b-a71c-48c4-b408-5e9b80a9d9c5", "indicator--12d01161-6dfd-459d-977d-01370134097f", "indicator--a6f4fc71-227e-46c8-8002-edf6c5c549a4", "indicator--09ed76e5-ac8d-48da-b7a1-3066712a6b35", "indicator--767376ab-7d77-4512-b1f9-92dafd74be7b", "indicator--214600c8-83a0-4322-ab37-3d210ba3618e", "indicator--82094f74-be19-4ff6-8bc8-ceca53cd23c7", "indicator--013ba3c7-d71f-4e0b-8eb5-9e717d363414", "indicator--684b7615-4da7-4b5b-8c34-e3ac44634a13", "indicator--40e8d64e-579e-4fea-84ae-e07f9e031826", "indicator--27abc732-59b9-42e5-a489-8f6d35d9d41b", "indicator--895c5007-e36d-4d32-9c0c-f14e2effacd6", "indicator--4a29ed5d-ca4a-4817-a9b3-e1ad995a3968", "indicator--10881a42-9b35-4c39-a765-cca43eb91267", "indicator--cc60a77c-3b29-4c29-9f1f-032d8304d2ad", "indicator--d8b8f0ba-6395-47e1-89e3-154c0c44b15f", "indicator--cd1608c8-d1fb-440e-ab68-440bb7aa7de9", "indicator--bab6d946-c319-4b2e-bff9-3a6e74885db6", "indicator--02623bf9-8ab7-4e63-918b-c30778256fc3", "indicator--cd577793-4015-4c54-820a-4beaf01e13d4", "indicator--c652f6c2-7b9a-40b8-a12c-00ab20a82e71", "indicator--88e86666-432d-40a7-b55c-391a0abdc40e", "indicator--c773f9e1-8bef-460a-9410-8a068583cdf8", "indicator--a10b4ad9-de96-4ce7-a429-1c0c3d886d37", "indicator--ed95fd73-c967-410b-8ede-3fe001da18cb", "indicator--f02163fd-8c7f-4ae7-befe-3343092de34c", "indicator--7dccdc17-d5b2-402c-951b-baa1f677a5cd", "indicator--9696988e-14f2-4702-9bd0-7e856a4cc4f9", "indicator--8e8e7042-3665-494b-96cc-ebb1b87dcd85", "indicator--94fd1a76-6500-4dff-9cf9-e274240b6989", "indicator--e6a979e2-5201-43af-81ee-494d447ac87c", "indicator--e0a7f4b5-064d-4f03-a97d-40c34ec5224a", "indicator--414670af-4d49-4657-9dd0-a47b42137813", "indicator--e05be48d-6111-4566-b8c0-ae52a01add63", "indicator--5a1e708b-458e-4d05-b492-ec54a902e3de", "indicator--54c85c09-89ed-418b-b708-202d1f6d8749", "indicator--eb8409f5-71a8-449f-8ca6-203190fcd0a7", "indicator--69b4eaaa-0776-42c0-a39f-7e1128f6519e", "indicator--df200250-39e1-42be-ac57-e556d224ca2a", "indicator--22fc0c9b-3896-4aef-9cc3-b7b80c183926", "indicator--a0b5db64-b191-460d-80e8-b4d3a9d9de03", "indicator--ce6fa651-47de-46e9-b7d5-55ccd86239e3", "indicator--b5443197-5dec-46ec-b5f0-f3930d11bce5", "indicator--62300178-6145-42b7-821a-2dc456289759", "indicator--2f6616c7-5455-4457-ac8e-95133cf165a5", "indicator--833a29e7-9308-4c45-9d68-5ff6033e9ccc", "indicator--ad4a5b47-c4ce-429e-9243-7eb6004562f8", "indicator--852726c1-25ce-4c08-93a0-aae88ff8c93e", "indicator--7a0168dd-11f5-4f46-a62a-f35c92064421", "indicator--e2cc3e78-0e02-44df-b05f-5b49626dc4ce", "indicator--7d308644-bdf2-49fe-aa5a-61c9e08a53a2", "indicator--6d52c20b-f90f-4280-8f9b-1b44ffc0f51e", "indicator--4172640d-97a0-41e1-bd48-fe3eae9424a9", "indicator--a8135eed-9caf-4be0-919b-26492ef14615", "indicator--4c8268f1-690d-4e1c-a773-dabdd6ceecc6", "indicator--7440c6f9-7499-4c0e-8427-a1c642be5205", "indicator--75743634-9d1a-49e2-bc50-243e180ae710", "indicator--28b13ca4-413f-4984-9586-448331a0f47e", "indicator--b085ee6b-2f65-447a-81f5-6e493c67a955", "indicator--5d54a478-262b-477e-ae5a-ab3a296974b2", "indicator--7d75d600-5bb3-4e27-a878-a88e17addb7e", "indicator--c9dbfdb3-6cbb-46e4-abe2-adeda13e2130", "indicator--8aaa28e3-8738-4b99-b8cb-2b85ba7f9a53", "indicator--4726bc95-6a1d-43b6-ab71-62a97c1dc621", "indicator--7eb22418-fb49-4f8b-af3d-9d8e99714bc3", "indicator--4893d21a-db75-4971-ad27-4c5ad56447b6", "indicator--ba8babd5-0d23-46a9-afb7-1e9bb342687e", "indicator--54c8f859-ac61-49a4-8729-785325c6a769", "indicator--20e99129-3a00-49e0-a2fd-3eb3e8745d27", "indicator--def5970a-1988-44d3-bbe1-87dcbf3cd0da", "indicator--7b4927f9-ebcd-42b6-bac5-94a456839415", "indicator--33d92b4e-3c46-4672-a93c-8bcdd6ba5a83", "indicator--a9eeb7b5-995c-4edf-8894-0095dcd2523b", "indicator--c97b6318-0e3b-4b0c-958d-9227834c9bb4", "indicator--d6d6eec4-5e90-4525-8275-303960666276", "indicator--90763a00-29b2-497b-9549-2f4f88f257e0", "indicator--bc12dcb6-c974-4439-a477-ceffd734c892", "indicator--f444587d-69ea-4a96-9e54-e1a8a3da0ee2", "indicator--d3633d37-aa50-4b07-a480-ea01582cc228", "indicator--1787f48d-e55f-405a-8eab-2f6b5b8dd88c", "indicator--6c1f9aa7-ef7d-4a05-972a-2bc2d9e01bf8", "indicator--cfec88db-d47f-4bfb-b16b-84a8b91ac0eb", "indicator--c6cc9fe2-20f1-4610-836e-0efb760facc2", "indicator--4300686a-ffff-42ef-b824-5b29463fb06d", "indicator--856b70df-d200-4efe-8609-16924b6f1a67", "indicator--d33e49f0-7963-4fdc-b447-56ca3f598e45", "indicator--87f8bd7d-d9ae-4434-84ea-9e20b79d6e2a", "indicator--1837893b-0398-4d56-b8ee-17445d9b0051", "indicator--bad292c8-1f70-4372-ad7a-cf95d381dfab", "indicator--46f67aa4-4de5-463e-90e9-bf5bfc614b14", "indicator--5d31270e-0ef2-42bb-ac06-80a18f3366b3", "indicator--dcdd86ce-3458-4e87-94ac-15605962855a", "indicator--39534d57-e4c0-41fe-82c2-2d26c85b7e9e", "indicator--5cb4c1f2-5d96-474a-9fe0-fb21393d94d8", "indicator--87459ff0-31ba-410e-8c56-b230d66a15bd", "indicator--d2e25577-1d2f-4cd2-9652-9da457d3ff49", "indicator--b3e1754b-f34a-49d9-ae33-f57c09de1063", "indicator--4610ebab-67c5-491b-abd7-3ffdb944764d", "indicator--e297526d-32dd-46ba-9637-69028c032081", "indicator--9d9b8a66-8a72-4a3b-8e99-d7607a51c7c6", "indicator--b18551cd-c6e0-44f8-bdc0-991fdf6dd3f3", "indicator--e5846b3e-358a-4388-b6ce-2c80a84ed5da", "indicator--7bca0af1-0500-4f47-bd2e-c46e963f6b0e", "indicator--1643bac3-31b9-4469-9302-1435da1a31d8", "indicator--f5361c1c-674e-464e-88d6-8e462132c208", "indicator--69ae7e90-d648-43c1-b7ee-0db77e353b05", "indicator--e84e4003-97d9-4e81-a24d-7f27ceed7730", "indicator--858b69b3-95ed-4813-90b3-c50f866caecb", "indicator--f3d45f4e-453b-460b-89a2-f24a25b6a5c7", "indicator--600e274c-94b3-4b7c-93f6-aae02b82883f", "indicator--b1812716-3902-4701-bb19-8ffcaa414b5a", "indicator--edc1299b-97df-472f-a40e-1dc9c7d0261a", "indicator--24b73c6f-1e99-406d-88bc-206d61e559e3", "indicator--1dcb1d84-9c94-4a34-b5f6-f03ff816bfb5", "indicator--8075e350-6b80-4c96-8c06-070f466f0819", "indicator--70be444e-8244-4c48-aa4b-7b8b08d1ee46", "indicator--9a231716-05c9-4d48-95a9-a933cc5d2d06", "indicator--1ad2f9e7-4e9b-456e-83b0-c2188a65c542", "indicator--4529fdcd-0505-4ea5-bee1-d49909357978", "indicator--6c4d0d15-faf0-43fd-b698-5747c29ab8d8", "indicator--a7d0cd2b-b48e-4e78-b564-42abc6ea0ea5", "indicator--536c9f3b-ce08-4767-a808-9db526f32430", "indicator--69396d6d-43d9-472c-b7dd-ac963980b7fd", "indicator--ef9b6201-fb28-4ff3-8724-967475a2fa04", "indicator--d4c8ad99-d959-4437-9846-19d16e7078d9", "indicator--8058d97d-1534-44b9-b6c0-19cd123b80e8", "indicator--98980eb7-5e66-4ca3-9ba6-f76a8af197d2", "indicator--fcfe57de-dd4f-49ff-aaf6-5731428f1a7c", "indicator--1f138e4e-ce43-4e0a-a3cb-07b5b3b37f22", "indicator--dfd6f66a-d740-4701-a87b-5ab9d426a6c2", "indicator--578185a8-0d0e-4608-b57f-ccb5704a0165", "indicator--40900fbb-c2d6-465b-8b61-cd45a344e5f3", "indicator--586cc18c-ee0f-447b-b946-d8727d12c4c8", "indicator--3664039b-89cd-4f6e-bee6-c0df624822d0", "indicator--4f2e91d1-71ac-467b-8e73-718fdde9120b", "indicator--e8d4d8b6-f0e1-4236-b4bf-e687658e6b73", "indicator--945fab97-2752-46f5-845e-2daadebded56", "indicator--1a905dcc-4bcc-4247-8e8a-482c91497002", "indicator--a0675907-f648-41aa-ad9b-91a63f37fae6", "indicator--108125ba-2875-4548-9b49-b0729fdfb2e0", "indicator--85667c0f-0753-436c-8433-fe3889e3d25b", "indicator--877908a6-8aee-4c5c-aa72-e41042ca5d4f", "indicator--d6a9bbae-7857-472a-97e3-9c6e62e665c7", "indicator--eca4a15f-1b66-4806-ae07-e4f9d4a5ead1", "indicator--06cc35bb-a89d-4ec4-850d-50e7d9e6cd78", "indicator--3cf69280-01b9-430a-b0b4-03d2ceaf8b1c", "indicator--4e19ab37-f12d-44fe-8910-21c3e8bcbf78", "indicator--9a3c0cc3-1824-4cb7-9039-e4e020301cfb", "indicator--29c4d41c-82c3-4447-b57f-2c3d65073d12", "indicator--36cb3178-8283-49d9-9958-82e301d21b81", "indicator--7515107a-e031-42c4-804f-04e5cbfb1075", "indicator--888f6833-2a56-4eb5-b883-86abcf07ca9d", "indicator--29b765a5-2dfe-4f5f-a17b-5fa706bcc0c9", "indicator--8d721c49-01be-4aea-b3a2-6d91c2cee802", "indicator--363576be-474b-4167-8457-3df6755e7ccc", "indicator--6fb75fdd-1cd1-49e3-8fb1-2ce49e4f8690", "indicator--5f82bd06-ad22-44fe-9808-071831689dc7", "indicator--a7b9678d-547e-4444-ae49-8d1971d42070", "indicator--592fb7dd-6e9d-47bb-8a4b-6adc9a836a0c", "indicator--784e5a0f-92cb-4990-b8c3-6eabf0d36473", "indicator--1557fb3e-ab4f-4e2b-9719-5d7ccfefb74d", "indicator--df9fb77f-1f13-4782-b73a-77a783b1211a", "indicator--8ce51465-92c4-4dfb-b99e-0dcb74a4ee6f", "indicator--271257ca-f7c3-4b85-9eb1-c8ffbd83a789", "indicator--41edfadb-0709-4660-9652-814a421fe72f", "indicator--bbc702f0-4dd2-4548-a3fb-49fff19dd93f", "indicator--9a34442f-c7d9-46d3-a4eb-0057b6c5c0db", "indicator--f881098b-2a7c-44f8-9dab-844acfaa9b47", "indicator--b7793993-27bf-48a0-83fc-25b536dda1e8", "indicator--ccdc3fc1-5c2b-4ac7-b7c5-cb806804cf77", "indicator--be03a616-5f02-471b-8796-e699b52a0395", "indicator--25f493a9-6314-4f21-97dd-6d6613192606", "indicator--0832212c-0db3-479f-82fa-c86369ab813e", "indicator--470301a3-2222-4e93-ba85-dba4cea149f5", "indicator--92826c9c-4f04-40c7-af57-ab987b680ec7", "indicator--b078e76f-1986-4663-a4d4-73edd92bc658", "indicator--85e667bc-18d5-43fe-a5f6-62d81f90bcb8", "indicator--c99d75b1-b0ac-485b-b961-22bf4564cd6b", "indicator--af736dcc-dbd6-46e2-9c1d-161bfee40dde", "indicator--783f362c-8fb6-4522-93b9-ce8412997706", "indicator--b8b35148-e43b-4c3f-be86-2f1c68a06cef", "indicator--c3def369-f51b-49fc-878f-451bb7376ed2", "indicator--541382ed-960f-4626-8a5f-d42360ceb33e", "indicator--c206720e-90b0-4b9c-9613-c3861d796555", "indicator--fb0d544e-a90a-4070-9bc3-9fa6dc6f827d", "indicator--741c540d-796d-4394-89e5-6a8647418a22", "indicator--972325b5-4f8a-4fb2-b82d-203c3ae103ea", "indicator--0250692b-2e3d-4630-9757-30fea777a804", "indicator--30448c4e-f287-4e5d-93cc-200ed109eafe", "indicator--39c21934-b428-41a9-ba78-b2e18ab3a177", "indicator--1e2bd6fa-6494-49d7-a99f-8d0a764bb904", "indicator--1c593a0d-47f3-446f-b063-e8058834be22", "indicator--dae35c84-b7f2-46dd-85ac-6ec027bb772f", "indicator--6a4db56c-bdfc-4d4a-aafd-41099f76390a", "indicator--02e2f92d-dd08-4448-8e36-8b867a2cb9a2", "indicator--946919f6-8e9a-4f14-b2dd-4153d6aeda0d", "indicator--842eb783-a429-4d36-8c11-6fd226e20784", "indicator--560f3165-4824-455f-9f91-c19f05ea2326", "indicator--008511f8-5139-4518-a3c6-9da23d31d7fb", "indicator--d0fd1169-bd68-4fdd-8826-1fe69eda2a13", "indicator--8617540b-bcbc-48bc-b95c-0c51ae28eb29", "indicator--0096b362-4b56-433c-b998-ebbe1a6b3452", "indicator--47a2df9e-8ff4-4d3a-b06d-13f60222399e", "indicator--0ed313a6-acab-45d0-9e4e-b60febd75835", "indicator--6d369efb-e19e-40dc-9a49-d5eaca4d8a40", "indicator--747373c6-72d0-472d-87c7-c6081b04ac9a", "indicator--8bf9f993-c1e4-41e7-933f-87b7d5baec2c", "indicator--50d1078f-2e38-4943-9080-35490e5eebbb", "indicator--c06bbe3a-c572-4f82-bcf1-958d184bddd0", "indicator--51f76a10-f38c-411e-8795-b27b27135186", "indicator--2118bde9-8fa7-414c-8ea9-740b96129e34", "indicator--1e31fcf3-9871-43fc-83de-cfb8481689e6", "indicator--bd81631a-faf7-47d2-be79-d768dc10e867", "indicator--f4b1ca00-7e13-4482-ba9c-8b353fcb5cad", "indicator--073f393b-ca6c-4563-aefe-e938ef0d2cd6", "indicator--cc0610ff-0af2-4c1d-b740-5b77363b77fd", "indicator--da48b2f4-04b5-4be8-a77a-a660008fcb89", "indicator--cb58ed9b-d970-40d8-b6a9-57bd6eb3d1f0", "indicator--10bd6670-a21b-4192-8081-8d5c4d2b4e15", "indicator--f3448b18-0ec9-42f1-ac1e-43a3106474bf", "indicator--c3f9693b-2a14-49f1-a68f-3974ba07f9f3", "indicator--8e1ec458-b294-4d1c-9c9d-5943157f5ddf", "indicator--a70dcaa4-0acf-4858-a444-8d2662af78a7", "indicator--6732b674-74b3-4621-ac6a-7561bd996363", "indicator--693f62df-2145-44a4-a1e3-e0a19463664e", "indicator--f5cc2df8-c70e-4ffe-900a-be01f128f912", "indicator--6332d60b-790f-46f8-9633-cc5ebc20792c", "indicator--7f645cda-0b2b-4d2f-a71e-a8538a5cb79c", "indicator--864e8be6-e66f-4b63-be8c-74b804c3ada1", "indicator--5a648369-b167-40e1-8f73-a33f6d82f1cf", "indicator--4f69429a-0ef1-420f-bc1e-8ca92579e30c", "indicator--5ac2233a-b425-4429-b24f-e82fa835a316", "indicator--6b31c1b3-2640-4d77-8840-5be1111d1f95", "indicator--e5ed33eb-3895-4e3c-b157-330a81ba8ffe", "indicator--1002a502-1c17-4948-8727-c4663b3d0898", "indicator--718fc9ff-a5f2-4ded-b357-53a9a60228c1", "indicator--72e3e121-5172-480b-9469-f507062c426d", "indicator--6107855d-78c9-4a57-a135-8189f904e09b", "indicator--4b28c05e-4868-4914-a9e9-b22e2a7d5618", "indicator--ac9f589c-6926-4753-9770-147f1c20caf1", "indicator--382f4e92-715f-4f63-bf2f-c65f63a1f1f1", "indicator--4c0ae1bf-e866-4dd1-b70e-7ab5d6e7d2ec", "indicator--8bda6a9e-cab9-494c-90f0-900c4fd33d56", "indicator--d956142b-fd47-40f5-a29f-39d1ffced7db", "indicator--146d7c0b-f866-41eb-b386-46b58b30db60", "indicator--129c303b-fb1c-43dc-b109-e27cc5354f02", "indicator--da6e4a00-1c3f-4e30-862b-336362da9a39", "indicator--ce037074-64e3-4af9-b60d-d59598b00465", "indicator--a95fe0c2-b4e2-4110-9d25-02182b0dd0a7", "indicator--96a014c8-5a57-433f-9b5e-c633f28cfb69", "indicator--b0ce2abc-1b67-4b57-b1a3-1e8a6322df5c", "indicator--c85c96ec-dbab-491e-9910-1d443ad79d7a", "indicator--46b71666-76e4-4110-9a6c-709f405fc051", "indicator--99c2d652-0687-4f33-9810-5d882cce2aec", "indicator--1fdd7d9b-ce8a-45bf-a7a7-8e55ed97517b", "indicator--8b3e7364-ba84-4b02-9f73-b37b7f5892ad", "indicator--5305d896-1fff-405e-901d-6a28d650dfee", "indicator--406ee60a-a5b6-4bd3-afdb-aed4e16f9ca8", "indicator--0f546edf-e8e8-4feb-becf-9afdfd42ae2a", "indicator--04219c6a-7420-4056-924c-1f8e3ca22a80", "indicator--4a712e07-2ebe-4624-9dc9-aef77cf3df1f", "indicator--7f8b556a-2e95-47af-b4e2-635d7a80e39f", "indicator--a3629713-7a08-42e0-810d-460e289e6a99", "indicator--ad551fbe-0a80-4e09-926c-e6bfd313c1c1", "indicator--9caa0193-9b6b-4c4f-a2cf-48ad96d010f6", "indicator--edf2054d-baff-4d22-93ef-3391bbd3d089", "indicator--0356fa46-575a-4328-8881-a846cfa0debd", "indicator--97859c59-8eb8-4ebe-bd88-58225062c2aa", "indicator--04071948-6cde-4ee2-8b9c-6a4ab22309b3", "indicator--e62d57b8-09e5-478a-a83a-8ade003ebc9d", "indicator--727dc4de-1578-4463-965e-b1a2060f5b4f", "indicator--5e8a9b99-ffa9-44a6-bca6-cc867b5b4eb3", "indicator--98f1b512-b171-474c-bbe2-3156ce995c80", "indicator--7e25583e-c345-40d5-a503-f71c84d86bb5", "indicator--7c20416f-0ec7-47ed-8a0b-c82d2edc2cc5", "indicator--c45cdbd7-7af3-4a9f-9c49-01f071b71828", "indicator--062d28de-3c32-4d07-b4a9-4b8bbd6ed3f2", "indicator--8fd26610-31ca-433a-b85e-115b78ff151c", "indicator--83868503-65fe-4a5c-881c-0c5485f2562c", "indicator--2dd216fa-d6bf-4a19-94a8-e020d9bded8d", "indicator--307b8430-236e-460f-94de-61a5342293a0", "indicator--b4e92e20-1455-4afe-bf9e-61c5aff2b638", "indicator--174193a7-434f-4166-97d6-d936ece57edc", "indicator--fb5ac9a2-96d8-4795-afe6-6974dd14201f", "indicator--bedbe3be-3c9e-4b5d-b512-4d67e16c2953", "indicator--515575f2-0de1-434d-a8ef-02d0db6da4fc", "indicator--f93f6cd9-885c-40c4-bd4b-b92bb6ed7705", "indicator--4314d334-0995-4d97-94dc-098388c9a87e", "indicator--d7f0269e-7665-4ff9-a9e4-841167fbce2d", "indicator--f1dca196-54f9-4ba7-83b2-1cd43a72e8a1", "indicator--42b2f25e-fe0e-44b9-a919-e3b3f25e0f05", "indicator--61766e2a-176a-444d-bff8-77d02f9bd696", "indicator--f20631cb-e171-40e6-af7c-ba59b425d1a9", "indicator--2ba13195-80fb-46ff-beee-713f0cbac2f6", "indicator--4250baec-245e-4ecb-b0d3-9ebc81599f87", "indicator--d187a414-1237-4839-ab24-a3185a1d87fe", "indicator--d19fe3b5-7cc4-404b-9cee-f425f996e781", "indicator--629f6c7b-ea7c-482a-840e-f4f3ca53df71", "indicator--7fa4191d-1457-47e5-aeae-2b2ff605d784", "indicator--928a438f-9911-4c1f-80e1-3cf72feabb31", "indicator--265d37a4-f8e2-4d91-847b-2575953a84d7", "indicator--c0e92136-cc05-43db-8b43-49d0d553af1b", "indicator--1fbdb6d5-7ece-4e3d-bbb6-5b81ed7fe934", "indicator--77fde0d3-d835-459c-9f47-f3d05ae56c62", "indicator--ca6e65bc-7618-431f-83f5-a1b6e201b5b1", "indicator--7b313b0b-e6bb-4f6f-9ac9-544c439c17c5", "indicator--4eb271f9-5a4c-4f4e-b9a5-045c9eae6d15", "indicator--8bdea92a-71c0-4e4d-bffa-3f2c9884dc6d", "indicator--08bda1e5-1caf-466b-9729-7b4939cc065e", "indicator--3ead4b3f-a3f9-43b2-8295-6fbd00dc9a74", "indicator--330744c3-1ade-4d8a-b76a-7a7b88d94b34", "indicator--cb2b4dde-bc70-4840-b207-d00eac3cc7a7", "indicator--ff4c3f76-2f0d-44f3-a6d2-d70a4230954f", "indicator--79c5b564-cf25-450b-a8b6-51920fce49c1", "indicator--ec76d35c-591c-486e-813c-fb5b4e4aba61", "indicator--98588959-7674-4f48-b8b7-0a278b02e52d", "indicator--b1183d49-4e80-4fe2-9000-30dcd88eb18a", "indicator--35a3270d-abab-4c7a-8378-7073654b7706", "indicator--42f25020-54a2-4f87-8f59-39f12f580a8c", "indicator--fdc61b6e-936e-405d-8686-b2a323af9472", "indicator--b23a44eb-4e67-4946-8632-d9369b7dc025", "indicator--0adfc8ce-0f4f-4c24-8439-e50fc8c76eb0", "indicator--8cb8875f-dc5b-40f3-84d1-5a72de2592a8", "indicator--cb1e736a-04c8-40be-b32d-f77e8e67d478", "indicator--3ad3ad93-e48f-4bd3-aba9-ea1f53c4906d", "indicator--b753b622-f663-4d41-b41b-d591f8aecac4", "indicator--a1bc263c-eca0-4db1-8f02-9f6e84823272", "indicator--1c4a177a-5b43-495d-8bad-a7de7d78a2fa", "indicator--5b1d2343-fd8f-48fb-ac4e-d79ce7e39fcf", "indicator--0bf75f2e-2853-4e53-9458-ac82d81779c1", "indicator--c447b3af-727e-4881-b5d4-0894b94bbcca", "indicator--95f29b50-ce7a-44ea-9754-b508aa2ebccc", "indicator--a395b623-982c-467b-8035-c9aebc4398da", "indicator--911e2e76-5a42-40f1-a214-965031fda166", "indicator--bc6fe9f2-f56a-4fc8-b9fc-331fb47261db", "indicator--1db425d9-2b06-4450-9711-e5818be17a66", "indicator--b9b72b2e-d74d-4af8-9467-f6545313fed7", "indicator--9f7f00db-0f4c-4d48-abc4-12601ac45e21", "indicator--ccf534c2-2673-480a-b0f8-2b2179e94cb4", "indicator--882a69cb-1b7b-4af1-bbda-68370ef59f54", "indicator--50450554-8fe5-440a-a0e6-e50ce124decb", "indicator--9c8f423f-0fca-45ff-9e1e-ab2c74d68208", "indicator--5b50d355-6d6b-48ec-a009-7cc0a3d3f463", "indicator--6573953e-777e-4521-ad33-6fbd2bdd6dad", "indicator--e7784a0c-0dd0-4674-bc54-33992e6da705", "indicator--fa41b60d-ec7f-421f-bb70-748f6feef855", "indicator--0c59f86e-a2ac-463c-a2a8-938040129fe0", "indicator--6fa2df16-5268-4590-aeb6-632eadb74408", "indicator--7108dee0-3035-4fbd-b4b0-70a674dc2cb9", "indicator--ce94aec8-7aeb-48c5-a51b-f22f8bbfffa6", "indicator--d69f0dcc-5cd8-49c4-8d19-8deab8224044", "indicator--59c08da7-3c13-4496-afa8-9caac9a9fdc4", "indicator--1422309a-3849-47e5-af96-4b4755af0b53", "indicator--4adec817-6a48-4c64-9736-a99f790904f3", "indicator--384cbd13-f172-46ca-9e4a-33dea3a26159", "indicator--362a64d0-1bd4-4a68-9464-c64ab1da6635", "indicator--8f94b206-59b3-4cdb-9ece-f6cd3758a470", "indicator--76e7f24f-863e-46db-8818-bb4972287cc1", "indicator--ae3acb49-cba6-4640-b5d2-076916d236ad", "indicator--9811282b-2d3c-4427-af5b-a17b33d23966", "indicator--45fefe18-a72c-4149-a0c5-990619effa88", "indicator--c9c364c3-1951-4967-93cd-7dc0cc346a06", "indicator--14660dd0-5790-4ad8-9714-246116f331ce", "indicator--5d77b37e-84f9-482b-ba62-9fa0d902ef84", "indicator--dcb2ca62-0cde-47de-87de-210b4e1ec431", "indicator--9f504be5-86aa-4b87-8b35-ae498e01888b", "indicator--8f2cd7e6-821b-4e03-bca5-4a2bf30120ab", "indicator--73f777e2-cb58-4f04-baa9-5f2a39a502f8", "indicator--4223e8b0-e42b-4fdd-90bf-6c661deee38f", "indicator--b3f60901-4074-41c3-9d69-c891835d201b", "indicator--5392c4fa-cd7c-46a2-8e1a-d2c2ec673ea7", "indicator--29099abf-6ed3-45b8-bae6-7b5c4240013b", "indicator--f13947d2-1f8e-44c1-bcdd-0ecba26f4966", "indicator--313983bb-b4cb-43db-98e4-9c6d0c6eb191", "indicator--3e3ebc7e-ca5b-4fb0-b835-e98253cd2ba5", "indicator--b57a3841-d3a6-44c3-8961-d593f6c30fca", "indicator--004bdcca-082b-4745-824c-75bcbc514f4d", "indicator--df1563a3-0ea9-4c4c-a999-67950ff3481d", "indicator--2fed67b3-6fd2-45c8-9385-bf72deb0aea9", "indicator--edcdb98d-7722-47d8-b484-38a73e3cd3cd", "indicator--cab2f665-c5a2-4014-a0bb-977e3e2515a0", "indicator--772f27ac-83af-4658-8331-3a8232fa8e54", "indicator--8d451052-0e5d-49ba-8a60-ec911a85a054", "indicator--871ffe9f-c4bb-4534-8f7c-5fddf17d23c9", "indicator--8b8417dd-40a5-4fb6-a447-dd536bd9a913", "indicator--9da38c3a-0508-4ded-a877-1cc2849f1dd3", "indicator--42611b15-e6ca-4b13-b419-676da13e04a9", "indicator--72092c0b-fa7c-41f5-91c0-7b1e61747ba5", "indicator--ca78eedf-eb67-450b-91f6-9233d9f693c1", "indicator--6e0b5109-096a-40c6-a6b3-d0e5ef7f47cb", "indicator--a1c10ecf-dede-455d-af41-d82794bdd642", "indicator--24cc514c-e613-43e8-9cc2-d8261d184b29", "indicator--0e03e218-ddc5-4ef0-9cf5-306385b7fc23", "indicator--2fb804c3-da2f-4857-99fe-b6d8490cfeed", "indicator--7595b0d1-fd3f-468d-8e49-9f3327abf641", "indicator--f6cb5ac2-3fee-4e78-afce-eb1bf5d3e364", "indicator--b72dc6c2-7c7c-40cc-a8b0-c7a4f9ee42e4", "indicator--9741fa65-4f84-4567-b1dd-91536738e4be", "indicator--4ed352e0-a994-4391-adb9-b31f80bd2e79", "indicator--9d2f4abc-46be-4e84-a56e-48e1abedd7fe", "indicator--d4a4880c-4102-430b-904b-d30b8d4461b7", "indicator--27e04e54-f01c-4150-96cb-a352b9c84d36", "indicator--7d3a4277-1e1e-450e-9e43-c7bb62d9b647", "indicator--2139559e-ebc2-482b-94d3-a2240f9e357e", "indicator--0d32d41e-dbb8-4de4-b55f-29e92bf47128", "indicator--2b15de0c-7d86-4f6d-85b2-f093e827f907", "indicator--88c2dcd7-d777-40c1-8f4f-540857dd071a", "indicator--98d753a8-6ff7-4291-924b-6e7532655735", "indicator--4fe7c99e-3f92-4d26-a2d4-92628a5ad5e0", "indicator--68fef9c4-f53a-422a-b165-497878dbaa6f", "indicator--6071067e-162c-44fe-9d15-a46838b227a2", "indicator--194cbf22-cae9-4138-853e-bca2004d76a2", "indicator--1976b809-daff-44d9-95e9-76393eae172b", "indicator--4bfbc248-4314-40d2-8ea3-d7771ac4360c", "indicator--abd509c2-ece4-466d-904a-290478eb5399", "indicator--2f1b3b04-71d0-444c-97a5-5b351b87f4e6", "indicator--42f12840-2a96-4afe-a82d-da3fb10cc632", "indicator--6eb533f2-a18b-4318-9d26-09edb2b15c96", "indicator--38a93d13-a886-454b-91fc-0a08384133ac", "indicator--3b9dfa66-5f8f-4f4d-bb27-9cfafa147267", "indicator--dd5a5cd3-4f5d-4c1d-885c-6652c72fe9b0", "indicator--e687af89-5286-4c8b-bca2-fb150b6756c9", "indicator--2678d4ec-ed64-4b79-a7a3-7b35b5531be1", "indicator--8e2f76ce-9e28-41c2-8596-b76ea5e78185", "indicator--44aa927b-1a56-4e84-adac-6d58ad92a568", "indicator--1a6ab18a-0711-487f-ba69-1f25fd6052bf", "indicator--35e1b1b9-e1a7-491b-a418-66d90efdfa32", "indicator--93107e09-4836-461a-ae59-eb68cd552a38", "indicator--5b738790-9ae3-474a-b241-2abf9a026d06", "indicator--8400b0cd-f232-4f81-9147-1b852a7b0843", "indicator--68c9ee1a-5735-4903-84eb-5dafad06e258", "indicator--1b35ca4e-57ad-4f38-b569-88f19becaf40", "indicator--f0dc0426-2ff8-42d5-b2be-92b80c79347d", "indicator--970044e4-529e-4139-825f-cc9081841c22", "indicator--030bc1c8-1e45-4d32-89da-a051e8649201", "indicator--8aaecb01-0ea1-408f-b200-54ffe42f813d", "indicator--623cfb31-e3e3-4c51-a880-cb6fd37cdc6b", "indicator--8678e019-94fa-4644-82ee-e6c6196e2876", "indicator--cf26bd39-4937-4f71-b29e-872922c76f68", "indicator--95364bbf-1bde-486c-9290-a08f96e1b9da", "indicator--889c1040-d07e-4e2f-9ab0-9642a5c24b91", "indicator--d7b65f1b-7077-4860-ab30-53c5cf3f7f8d", "indicator--9eaf62dc-2739-4eb2-b1c1-1e789fd0cefa", "indicator--5fb4f704-ba9f-453d-9043-e8f3f1fba036", "indicator--8e204c8b-67c8-49cf-adae-b624373e7d8a", "indicator--5f2b9fa7-9b4a-49f3-b9e6-d7ec87d471c8", "indicator--815fee8e-1f53-4bde-bdff-6417643cd668", "indicator--393a80cc-e7ce-4e12-bcb3-d8f9bc7c2f75", "indicator--6526e32b-6c54-4fa7-bbe1-79a9cc608383", "indicator--c9cbb4ed-9634-406f-bcf6-34fc1e1f68e2", "indicator--b618ec3c-869d-4200-9331-69662bb3808a", "indicator--dc6d5178-7828-4b2f-a372-3c91888f4b88", "indicator--c2df7142-4d7a-48d6-9f6e-413fa670c567", "indicator--a42470c6-0ca6-4e56-af0a-8a6463e6f760", "indicator--aae4c343-5c1f-4a7f-9b0e-51684960c183", "indicator--b7799d29-72fc-4348-b400-9a9c3a073978", "indicator--4d1ef0d2-1cde-45f0-85e7-143f51886d64", "indicator--e032ac98-f739-4f06-a581-5303b09170b9", "indicator--7c31d03d-a652-4367-b852-8c1a9d62fce7", "indicator--2be9bab0-5188-4414-a766-3c562ddb2d1d", "indicator--edcffa15-dd5c-443d-8089-d59b4cd83e1d", "indicator--eb71e1b1-db2b-4533-9e50-4ecafca48b43", "indicator--c9da8b76-2fca-4724-be45-a9ef7f5fd9da", "indicator--b3506035-5253-4bb6-b6da-edca796dbdc9", "indicator--397a9b2a-f0e0-4f90-a480-dc837fc6510e", "indicator--9218c9c8-106d-4dbc-8083-546e692101ab", "indicator--b86c8387-a8ff-4ab6-bd8e-75c76f5f625d", "indicator--ba6930e0-4dcf-4cf3-a903-0f53b7bb7cd1", "indicator--6a2e5052-3e97-4536-a996-556afb1d1abb", "indicator--1680376e-0da2-4b93-a778-471dc80241fa", "indicator--0ca25e34-d653-4558-bcb2-b52bcf6099c1", "indicator--818bc73d-4431-4f69-a405-c7d36d12b48a", "indicator--57795ca3-6c0d-477d-a3f9-09f360ddec87", "indicator--7d1681ab-3956-45c1-bca4-95f8487613bb", "indicator--d2d59628-760c-4aa4-a034-e433f19fcd5c", "indicator--b5752ee2-29e8-4faa-b988-974848a143c3", "indicator--7047caa1-d6a1-42ab-852e-f1b508381045", "indicator--91fb23f5-7212-4b77-8e49-a759d6cd149d", "indicator--49b68161-36d6-4161-b900-9f45a6c65243", "indicator--2e72445b-520b-42c8-97b5-e5dd2130b851", "indicator--85cffa4e-7747-4aac-a619-15f9869bb79a", "indicator--9a7a8a34-63ba-474b-97e4-0b1321115307", "indicator--994c2c85-77af-45f4-98c4-59b1f8c2194d", "indicator--0a553f77-c921-4d52-ad4b-734569542c94", "indicator--472cbb61-05ae-493f-8196-803a7c324194", "indicator--289cfab6-1313-469a-bd32-3050790213e1", "indicator--f60400a8-4dd0-43d5-b143-8c490b915b93", "indicator--2a5847cb-a7dc-49c6-ad17-0b0299fdc58a", "indicator--0456b456-c4a3-4872-87fb-1da33dfa4232", "indicator--cde213d8-8ec8-4327-9747-a396e89efd76", "indicator--030055e5-78f5-4513-b7bb-7ef2380afa9f", "indicator--9bf67d89-a747-4636-88a2-13723526ed85", "indicator--f3afc563-ac3f-42e6-8607-adae9b681ac2", "indicator--b8e0a68b-f102-4560-b46f-56ce4acbfe54", "indicator--0dfdd956-9255-4d41-aa62-c1e7d3764d57", "indicator--b093852e-fd0d-46d7-836b-4d9d26aed81b", "indicator--e901d6a8-3560-4288-83b5-0d1589b02a7c", "indicator--0d6684b0-151d-4fc0-944a-2e26f6429f22", "indicator--6addbbdc-17c3-4295-a119-87f398a96752", "indicator--7fd3237a-ac93-456c-b7ff-a8b612254422", "indicator--6283aef8-adfd-4f5a-aab3-33021468635c", "indicator--dca1c92b-e505-476b-af41-d30034c503bd", "indicator--94f9bef2-7539-45dc-ab9a-54da553de67e", "indicator--4cf2173c-4ba8-44d6-975b-c8c78aee9d70", "indicator--f55ae9f8-17bd-4595-8e71-56930f6dda33", "indicator--432087e3-be35-4b18-ac30-58cb4a25ffd8", "indicator--95576e61-12b8-4633-a298-f1ce1b9ca302", "indicator--4dc96747-34d6-46f2-a974-4a496b4f58ae", "indicator--7fc99526-5129-472a-8d02-f3a14c6ab094", "indicator--656cdc43-33e8-44ba-b168-90bbf0d17aed", "indicator--37738ca9-d503-49c7-9308-e6c2aca03c78", "indicator--ecef3f8e-4901-4d95-a09b-a34d32c520b4", "indicator--859e92e4-2639-4536-b0ef-048573ec4dd1", "indicator--16bc0da2-ea47-4066-adc4-3a90d17cd7f7", "indicator--215166d1-8abb-4cee-b7f3-79b55661cf56", "indicator--f7853473-f864-4bfc-a5a6-52ebc9659d02", "indicator--627d5287-6477-4991-9993-a32a5e07ece9", "indicator--c3dd53e4-15aa-4591-9cd5-5f3165008a31", "indicator--e4585f12-2d94-44b9-920e-c5413ccf9273", "indicator--393163b8-be69-459b-b507-6a3df9e6fc8f", "indicator--3fe63998-601f-442f-a249-7dd2621a4b26", "indicator--533a9809-9385-4277-929e-d3021810d4d5", "indicator--94487c55-1cf2-4f4a-9a69-36de140be91f", "indicator--c80e2e4e-37d8-436f-935c-8c5548a6d8d6", "indicator--7c196e89-94b6-401a-94a4-23c2437bf809", "indicator--89948a19-51e4-4b20-85c2-0e113237ee3f", "indicator--9ce2e63c-67f2-4b75-9d80-7e10a5639a8e", "indicator--31936d78-bad9-4c9c-a178-b703d4084535", "indicator--5fe98653-14ac-491f-a115-ac44fe88e901", "indicator--d2744276-eedb-4be0-993d-f0f01fb2d7e8", "indicator--9d3866c8-e475-46d6-a1aa-428b7ab66458", "indicator--2bdd5d03-3a59-41ef-82de-373ff7f7ea0e", "indicator--58d01217-8e38-4ab3-8058-c0c608bbd0cc", "indicator--2c7828c6-f93c-4d01-8d59-efe450cb2b9e", "indicator--f600ab60-a7a0-4313-a12a-c25fbf344cd2", "indicator--74799153-e64b-456a-8034-7f5fd1be3717", "indicator--d4078f56-c1d0-48ba-95e0-1a042cc8687c", "indicator--89bc9c91-eccd-41a3-8beb-f99a53162789", "indicator--873af8d1-2461-4526-b336-6cc29266da29", "indicator--87092a12-a68f-4aa0-a7be-f8a72358d45f", "indicator--131e6f27-5a94-424a-b78e-f9b2655b9eeb", "indicator--1c472517-bcaf-4995-ae2a-828698a130fb", "indicator--bc6831dc-ea96-4ba1-9e7d-12a6c548ee77", "indicator--282d76c8-91bf-419c-b033-76c792de0842", "indicator--0bd6d4c1-5f31-4f35-8832-7bdb80aa7c84", "indicator--cd546796-b309-4097-bd7c-aef471099103", "indicator--f978014e-2cce-409d-b9c2-a63a3e716d53", "indicator--34f969a3-44b9-44d3-a855-bdae314e6430", "indicator--31c6328d-ba9f-4629-9bb7-516b4fe87475", "indicator--01e9feea-8842-4a01-84d5-9d02cfe0ae45", "indicator--ba39dd5b-4104-438a-844a-ae54439cb6e3", "indicator--df980a3e-2287-4e72-bb16-9d1685048d76", "indicator--8b719b4d-4a5c-4d9b-bd54-0aa63de86875", "indicator--286586ca-8cc0-44f2-9dbf-961287e5779c", "indicator--4c0a0b64-0a73-421c-b6a9-386dfebff074", "indicator--b9bfb046-8c25-496e-b28b-31019fc96284", "indicator--a4c1b1ba-5eaa-4637-af58-860925f24f27", "indicator--1a79d1ef-8c01-47e9-a354-e2b0047cf5e9", "indicator--1109519e-e06e-4ddc-abde-92924aa5a847", "indicator--8ef374fb-12b5-4970-9048-84c3bb1078d0", "indicator--d4d50dbf-35c4-4ca9-84db-adca816c4a55", "indicator--65671fca-19c6-4194-a39d-573f626b029e", "indicator--de032060-1ad6-4764-9821-23655a229816", "indicator--327fbc21-75fb-4d61-8b36-e9b2603e9ba9", "indicator--65601a0c-7c6e-441e-b943-91695ecc28d1", "indicator--cc6524af-4c51-478f-b0e2-8658e37cf8d0", "indicator--96adf9af-7ab1-4941-a763-11c49e9e696a", "indicator--3b688cea-e7f4-4d2f-bb08-8b32c8cc527b", "indicator--ef907eef-d606-4101-b92a-37bb002a3fb1", "indicator--b6418c6b-cc15-493c-b85d-eef398fda3e1", "indicator--7304594c-2117-4b93-ad41-18a0d7507d0c", "indicator--cfaec9e0-d66e-44c1-911d-1f1d3927ce25", "indicator--5ae74b26-0fb2-43a5-9afd-6340548c59c2", "indicator--6f8ed152-6e0a-4166-8394-af8f7149430b", "indicator--2848e924-c772-441a-b7d8-c88c4ebc3fd8", "indicator--343f5b3e-70e3-43f8-ad14-ce8fff9e9eec", "indicator--1e073c01-f089-490e-be79-225dd6e3837c", "indicator--0e3234dc-f154-4c72-872c-8664ba66fc5f", "indicator--2f9622dc-d502-4d1d-9d34-4b0b183efac7", "indicator--72d23a09-e24c-4c47-b78e-1619e1eaade9", "indicator--7e8cef12-ad00-49d2-a5df-f93cc6a0e69b", "indicator--118d4131-fab1-4beb-9bef-dd812242c6d7", "indicator--61f534ca-6856-44b6-a4d9-b0f65f992a00", "indicator--830a623c-69b5-4c45-9c6d-1a693a9c55b1", "indicator--9910d9b0-78c8-4f57-8e60-8b17ee5c0d07", "indicator--e19397cc-2455-4b14-8d19-7d12d59bc902", "indicator--4d3682c4-40c6-4128-967a-ca46c0e3b35d", "indicator--6fdcd375-8a39-4283-997f-3731609826b3", "indicator--b2f24dc0-aa1e-4591-9852-7fb92fe71917", "indicator--b94fb724-8dc5-4498-8765-e74a312de094", "indicator--5982d3a5-d00e-4163-a5b6-264997ae8f5e", "indicator--8b337484-8b4f-4489-8110-b3e32e102dba", "indicator--4b3dbe2e-52eb-4442-ba5c-81747c72fd68", "indicator--1ac9ce31-dd09-4a11-8f3d-35f4157b974b", "indicator--8272694c-2442-4704-bc18-146295a3617c", "indicator--7887e0e4-65ff-4184-9966-bfeecc739418", "indicator--c9a46822-91a9-47cb-833d-1c83064e076a", "indicator--487ba34c-dda2-495c-8646-a836b44d7e76", "indicator--3c35a280-ccc0-4c89-ba0f-c4b0ca4a9354", "indicator--545f37de-1f43-4b6e-bff8-fc019ce1c76f", "indicator--fbfebf02-7d95-4464-8a9d-bef126821296", "indicator--b92811d5-aaec-459c-be26-d81573535c70", "indicator--55b021b7-9937-4cdd-9a81-c9770bb837e9", "indicator--6857bfec-9a39-4586-9197-7ad4ab969eaf", "indicator--948ed953-c718-48a2-84f8-792fba1903ba", "indicator--3dc5d3fc-cc34-48ef-b81b-05d80f30972d", "indicator--27ff4f5e-9987-4eea-a9a5-613397a2fc01", "indicator--1a82fefb-4517-4d5e-9c0f-08c1754a0464", "indicator--3a8e9b3a-d29b-4621-9514-bdafff6a90fc", "indicator--7eb512c3-0950-4fa8-b6df-ecd147a3aca0", "indicator--8fd7ca3f-3321-4b58-aeb3-9b45f1559c9b", "indicator--804f052b-bc7b-4e32-b823-ad5f34cb4f0f", "indicator--26122bd2-f301-4922-94be-dce629bcee74", "indicator--6f4dbe38-8a24-4cb1-b295-0d1826fede0b", "indicator--d8804cfe-2326-4696-bbfd-5cc1247d3d50", "indicator--f7acf1df-e684-4c85-889d-12891af81666", "indicator--0f8fd578-db94-4024-8b65-4dc609ddf40f", "indicator--2ee52965-01f1-4cf7-b78a-6ba33523296e", "indicator--f54478fe-3559-42fd-8c92-d91af835da37", "indicator--ed20f324-b53b-435d-9953-93b127162107", "indicator--70643063-9fc9-4ba0-b091-c35bc3708950", "indicator--18fbff5d-7f64-4bd0-b7ec-2d1bbb6061e8", "indicator--0ef18544-a6a5-4f5a-9dc6-5aeaba1d5ccf", "indicator--8bf2b935-db9b-49d5-8377-6b52085e748d", "indicator--6532ccc2-4d88-453c-bb90-90d87f0e18bc", "indicator--84333a05-ad32-4e63-b664-6b0a830ec8db", "indicator--e071f0a1-9f6c-4acb-8c48-e095f1073c96", "indicator--6bbea87c-f6e5-4c2f-ae29-742305374a66", "indicator--228f7790-5aa7-4001-8c10-0a36b221136d", "indicator--849c45fa-0608-484f-9b8f-8544fb81f6c3", "indicator--107b7250-3906-4538-98a0-3f130a0917d7", "indicator--c2ecf64c-fdf7-4fae-9f66-5eaffa95fcb9", "indicator--96036883-4eb0-448c-9c1c-2ea6e591271f", "indicator--5d11b8da-007c-4ed8-9e2a-c02a55c03ff9", "indicator--e8e71aa4-09f9-4349-9272-343ebaccc586", "indicator--9e26f8cb-de58-4819-bba6-d5a48467653d", "indicator--d9c3a0bd-4772-4b06-a944-e00bf6fb7135", "indicator--81f7340f-bb16-4a67-b0f9-efc07ca5e15d", "indicator--ae631124-08d2-4429-b620-2b5d703d3f66", "indicator--d336fcfb-7b6a-4165-8c72-99138f764f23", "indicator--6b254878-cb9b-448e-8c29-46ff4e7b3a39", "indicator--1af79e59-dcac-42df-a6ab-1f6044d14e05", "indicator--4a67d33f-1a9b-46af-8d9b-bf282ea9bfaa", "indicator--8d594fcf-4095-4573-ac27-f432a323afdc", "indicator--1ff54a73-bf3f-4355-865c-f25fed0e9f72", "indicator--3e59feae-5ea4-44ae-8af6-7c231f199a02", "indicator--db912a1d-f981-48b4-b05f-2d46ff08e72b", "indicator--2a14fb35-444a-43f5-a40e-4d6edf53e168", "indicator--d576cba8-c8f6-4007-ad2c-cb4ecc1087c0", "indicator--dfed63ee-ec57-47b5-bbd4-aff4a1bb720d", "indicator--f7de0b1b-723a-4c72-87d7-f418936d0864", "indicator--a5826678-f182-4a27-817a-bfdc84c11a14", "indicator--0499a02b-253a-4209-8728-fd859f33de82", "indicator--814089f4-8995-460f-a7c2-c60b3782ec6d", "indicator--8e73ed38-d3f6-4cb3-9655-fe6c44e88b8a", "indicator--40933361-b354-45dc-a0f6-8b1f65c69609", "indicator--4b226a92-3ba5-4267-a885-a1d9fb09b29f", "indicator--3278302a-0e9d-421c-be1d-b9b8d6011e90", "indicator--c5b8f2c5-2745-468b-ba86-a0e5c42bcb23", "indicator--2795e5d2-b8cc-49f8-97c5-b9eeb5135a9a", "indicator--58d8575a-6248-4396-acc5-12d9cdefcf48", "indicator--6bfc18be-b4d7-49ee-8d81-c9666de871dd", "indicator--4a921dc7-012d-4ca3-9437-4b26cf2ef646", "indicator--b38e1c8b-d360-4baf-9464-66bfc0a552bf", "indicator--d9e9d579-6dd6-4c2b-9d46-a8a020443812", "indicator--0945e188-34fc-4cd4-8760-9b4d2f31b607", "indicator--fef844f9-f88f-4e52-8ddd-8e62050d8bc0", "indicator--267de658-eaf1-4daf-922b-97e0cc7a8510", "indicator--8e7dac26-6f3a-442e-a7a9-03eadc324ca0", "indicator--36a8d43b-ced8-48a5-87b2-86a713709c7e", "indicator--57327fca-b4b5-4a39-8999-f290b3e4f50c", "indicator--ece077a7-c187-4264-a599-e7e14ff407ad", "indicator--718fb8a0-5bcc-4aa0-9caa-483276d74d06", "indicator--b80ce153-5ef8-4eda-94e4-4570b8685679", "indicator--3b9b1b18-833c-4f5b-8109-f8e9914c1281", "indicator--8ee575df-62a5-4449-be09-5dfaaae38fb0", "indicator--9e379b72-a56a-4d1a-a385-692f9e60c8af", "indicator--f4722be9-e775-4fbd-852a-e7a2a00a1f18", "indicator--3db8d8eb-f562-473d-a64a-c87a4a276dab", "indicator--3b32e230-ec5a-4cd2-81ae-9bcf732aa92e", "indicator--ef8a46d8-07f5-44b1-a702-68998821acce", "indicator--c63db43c-7a47-407a-9315-983dcd735890", "indicator--7f68f8fc-c417-4a63-b65e-f9ea4c2164da", "indicator--26d6a26b-1f8b-41cc-8d27-9b9ce2224035", "indicator--3f7daf55-1e19-4df6-b3c4-a834a7aceef0", "indicator--51ff2f15-7025-4401-9116-6b89acdb674a", "indicator--123836f5-2d79-4966-8ceb-d58d0e0a01fc", "indicator--8d3190b1-09c3-4cb8-89d0-333525d52195", "indicator--9a6cb3f4-fb0b-4adf-a387-13be0fd60373", "indicator--f4b09a9f-6b96-4bba-a26a-132a3c425d9b", "indicator--0ff4a285-fdf6-4b56-9549-ba78e41d6609", "indicator--d861a788-5266-4109-9eb4-7d657fb1f33e", "indicator--22b5f84d-6865-4657-8fd8-c30f40763230", "indicator--6ac94446-0568-4830-bb91-9c8844326299", "indicator--fc007130-e04f-473b-baf6-096ced95a18f", "indicator--4f58eb01-1c4c-4477-99ed-caa757c6ed1c", "indicator--f0d2db8a-f746-4503-afc6-d586a026e1bf", "indicator--01076623-bf4f-4908-9966-5447056d8a4e", "indicator--ddf37839-e84a-4660-84f2-6c34a4221bca", "indicator--0336e870-c237-4902-8ff1-ce6afe90fb4f", "indicator--97e708c3-b13f-4040-ae71-59078352797c", "indicator--97678e3d-7039-4bf4-9fde-96b86326a7e6", "indicator--d7f2a18a-9fda-48d8-bbb3-7d3c37e484ce", "indicator--bf52f945-f7f2-49e1-a403-8b96805217cb", "indicator--ca4374ad-b0b7-4398-a7cf-0df01583a150", "indicator--f37d8673-0108-4826-b02b-b97bfdf772f9", "indicator--2cd0e80c-5bd6-4c33-8857-6736db6be27c", "indicator--2a523a70-7223-452d-94d3-9706548f86bd", "indicator--181e8a81-60ad-4d6e-9716-e279f21ad29b", "indicator--91f4a5ca-d8c0-4814-840e-dc2937d3193d", "indicator--22e699d6-aaa9-4131-b93f-d6221104278b", "indicator--b27aa744-5787-481b-a606-7b79832a7a98", "indicator--9bb0d7db-fcaf-4451-a71e-10b3b8de3965", "indicator--d278f3fd-8e65-49b0-b2eb-6e52394baafd", "indicator--eda65845-986a-4b11-b56a-6ce7551b4024", "indicator--89abe040-e69b-4125-ae0f-76f4b31d0249", "indicator--b0c91e88-a307-491c-a127-691daacc9c0e", "indicator--f9ea05aa-4e33-4c0d-92e4-eafcdfedb2f7", "indicator--f03b3949-6dd9-4bef-a514-a52a5ff3fe0f", "indicator--50d3d7d4-c255-40b8-ab02-248975f4233b", "indicator--6714bac5-b032-459d-8502-86b54534f035", "indicator--aa745fd5-c566-4ae5-a987-626f1093003c", "indicator--698c888b-b7cb-4046-87f7-c86652ccdb55", "indicator--d5c54010-601b-43b1-8d77-70d744058c67", "indicator--af89c9e1-0984-4b5d-9504-1c083070d815", "indicator--2c5c8f89-b8ea-4a1d-84dc-8a7727347b0b", "indicator--9b2d5e8d-4454-49e2-ad65-19a21643284a", "indicator--698ab7fe-93ac-4d62-9081-8fadfb3c9dab", "indicator--a789a606-4253-4eec-a760-1ee29ee0f56d", "indicator--0a44a21e-d103-4503-a1aa-00aa502ad116", "indicator--85b8bd08-5693-41c0-b50c-cd6fe24fca09", "indicator--2e30656e-821b-48d3-85e6-da51da3dbc73", "indicator--b0388b05-cb66-41b6-bfc1-d8ccbd3d8680", "indicator--ceb07d90-a40b-4c5e-a26c-ff328d1cda17", "indicator--78705304-82b3-44f9-8e3e-defdc248a40c", "indicator--0a297d76-0390-4fd7-bb51-b6b80f335b81", "indicator--890dc18b-b09e-461b-91b1-8199a9b7b27a", "indicator--b4bc9d62-a0dd-48dc-90fa-8b6d893fd1f8", "indicator--781e8e7b-f574-4ba4-bb4d-00b785a67640", "indicator--3c6bfffe-8f78-4b04-bc85-28b19b586434", "indicator--8545b48e-db01-4035-9860-3b6c2ec2df75", "indicator--064fe611-70f3-46d9-9a4a-d8351e8c0857", "indicator--c3db9664-0e26-44a3-a27f-35de850e69c9", "indicator--1b5bc9c4-b87b-4386-8c63-45c2fa3beccb", "indicator--8b43c5cf-04a4-47eb-a3cc-0b2c3f08c35b", "indicator--2d9e4087-59fc-4cdd-8e4f-ce63f2028690", "indicator--53c545f5-7a96-4b90-8982-ee35b21dc2d7", "indicator--e466c8e9-002c-43cf-902e-f1bdfe27c2cd", "indicator--bdd16055-be79-4185-9fa4-43cede48d674", "indicator--ae261de4-8cd8-4594-a9cf-6602383051f5", "indicator--46c6dd9f-d623-42b6-9db8-0a6ccab60ce4", "indicator--9ceb2086-a8dc-4771-971c-898cf54a5051", "indicator--0b765122-e645-4818-b55f-b92abd7e0906", "indicator--9fa5a6e6-3dd7-4933-9214-b3d89eaa7a38", "indicator--8ea38837-03ff-4c2b-9ea2-e57c729adc2f", "indicator--128e6ea5-7a10-4853-bf36-3181d4aad627", "indicator--f8afd2b4-4c3e-4af7-a90b-b900fb2cf2ec", "indicator--f33ba7f7-7123-4820-bdbd-1ec6d2406cf2", "indicator--92c61b8f-b4ad-4cb6-aa7e-6c1129f9b82a", "indicator--8491bfcd-1911-496b-bf5a-04a78e78716b", "indicator--fc535b2f-7630-43d7-a53f-a9f26fc4d135", "indicator--0861940f-9590-4670-9c96-ef17a72a6f1a", "indicator--682168f6-0615-47dd-82d1-dcf21639f8d9", "indicator--bf5464b4-3147-4d25-b8da-1946165cfc29", "indicator--ea5b895f-55fa-4d80-ab71-cefac179befb", "indicator--48c183d7-b97a-4bd7-9987-325dfe14bb5c", "indicator--f52a77b1-411d-4afe-8a23-e29b72e56f7e", "indicator--010ed831-9175-44a8-b086-6a0cfe1544ab", "indicator--c2e4912d-733a-4225-b078-58f43f28b1f5", "indicator--abde7fe7-c8a4-4feb-8f5c-5442580dfc09", "indicator--054250f7-f84b-43d6-a7bc-5fcb2be19665", "indicator--77060513-e818-4941-b584-25077454de27", "indicator--62ab6e55-329a-413f-a141-f7ff2435ebb5", "indicator--20b179e1-8b74-4155-8d34-6b9ccb6cc10f", "indicator--cb68c76c-3173-4200-a3ef-9738b78817ef", "indicator--81d44bc2-ca25-4abc-8c2c-c62ec07a03fd", "indicator--8b9d819d-7802-4415-80c5-e1e3c16c7a70", "indicator--7ebf45b5-917f-4d0f-bf27-199d5d2c6c6f", "indicator--a6088757-bcd4-4a78-b8e5-01a0f6a597e8", "indicator--bb246bd7-dcf0-482d-813b-177736b2b82d", "indicator--19da07ba-ca04-4ed4-8f99-b83af64b0cd4", "indicator--f1d38eab-05a4-4b73-8ee8-a5ba95db082a", "indicator--79661d80-997f-4cc2-ae88-44fba387c872", "indicator--d941a5fe-6482-489b-a56b-847005a3727c", "indicator--0cae9f6a-0cbd-47f9-acff-27da8980702d", "indicator--b1266761-48db-4c83-9bdc-8e9b0ae95d1b", "indicator--1f50d164-f775-4f7e-86a4-17bc937bf9fe", "indicator--00b5d174-9789-494d-82a4-9672bae6aaa8", "indicator--d9a1b006-6c4d-416b-be34-a4ca1b11f250", "indicator--e8abf7b6-03ea-4ee5-8cb3-0fe9402cb3ef", "indicator--e8d2c9a6-55d1-45bc-8f99-aa5056889bb4", "indicator--2531d93f-e536-44d5-b832-26d77c2a4eee", "indicator--c9a9fe59-b42d-4953-aca1-4804dfafdba8", "indicator--5a5b5c0d-a73f-4f2f-81c0-842daf98a54d", "indicator--f7922887-30be-4ea0-b540-3ca34ef8d1cb", "indicator--1bc448eb-bf22-4ff6-9643-c349db44d203", "indicator--d7a68287-42c2-4930-9e96-5f40d314464b", "indicator--72e8073a-369d-4c93-bf4c-671270e1d348", "indicator--57902d87-40c8-4598-8012-57772b43d7ef", "indicator--9c312fe2-3f64-4bc3-8eec-9dfacaf406e0", "indicator--f0cbe61d-d7b9-470c-932f-fe77dccc42c1", "indicator--ccbe79a1-bf81-4bdf-82db-92866d08456b", "indicator--e61c3e85-b25f-41df-84e0-024dbbf32ce3", "indicator--1e9ac371-eef4-478a-a4b0-705b089704c0", "indicator--cadfa585-5997-4cf5-80e6-5beb513151b0", "indicator--ca59ff04-6d29-444a-b507-81a9cd47b89a", "indicator--f10305e2-da27-4ee1-b3b8-dbd6420bea6c", "indicator--243e7558-4dd7-43ac-915a-dc510a944d08", "indicator--c0702af0-47de-44e3-9027-d0205ac75228", "indicator--58df10e4-fb71-472a-9dcc-9302ea983964", "indicator--9dd948fc-1955-4d60-a100-398f4f29399d", "indicator--1ab22ba5-04b6-43e1-8c4c-d5b2420e2617", "indicator--3837aa7c-d24e-44eb-b525-2390ebc067ad", "indicator--bedab456-bd60-4b21-9795-e4e24ca368fe", "indicator--63a24da4-ac6d-42c0-aa25-43a28cbdbfe2", "indicator--39cdefe2-c4e0-4578-b508-1bfd519f0b74", "indicator--ad09f540-5b5a-4d0f-8edc-78f80922cdfc", "indicator--9bfc753c-b554-4130-a40d-f61ea3b37039", "indicator--b73e8b0a-cb54-4824-a7b1-f417d3163e20", "indicator--8f1c54eb-4dfa-4bba-bb9c-34dc13cb0cb2", "indicator--892366d4-3257-4b43-b6fd-19b9da53a099", "indicator--1423a64e-3251-448f-82c1-74b15e6d5750", "indicator--9ccdd98d-af9e-4178-9fc7-9f6703a99655", "indicator--0046dbc0-1624-485c-8bc5-2bb524035dbc", "indicator--8901d9c6-2010-4c5c-823e-4691ef9b2c94", "indicator--bd053bff-4bd6-4303-8bf0-c0bd07d4dc43", "indicator--86a0cc97-f1e0-4a97-930d-8d61010440a3", "indicator--2bab872a-b6a3-409b-94cd-3f41bdc11432", "indicator--10227054-6033-45f2-96dc-e54161fb0823", "indicator--96484f8a-af8c-4a94-8c5e-5ecef6f78306", "indicator--48e6208b-3f5f-4ef9-9daa-eec59345fc6f", "indicator--e8603fe0-7a1c-4897-969d-289cfdd63fe8", "indicator--12c3e010-f46c-4499-8a28-cf74c8efb888", "indicator--34fcdcac-79e2-461d-8001-00e2e62506e7", "indicator--f3cdee7a-845f-4618-b627-543da75d1819", "indicator--8dd5e803-7942-4fba-a25d-5783bb7befb1", "indicator--5afe40f7-6422-4f00-8d82-8f59e137edc8", "indicator--70954dec-38b2-4b8b-9fd8-eb0cd815a87e", "indicator--0518a938-3566-43e7-83d9-a1d47384fcff", "indicator--b8a4363b-e6b1-4b24-a0df-3a3e1af33a7b", "indicator--2e465552-f2d5-4872-9348-b6d3f88ebd82", "indicator--9ef61f83-2570-42ee-a830-69a32be9f448", "indicator--e7c79a19-6548-435e-b57c-2770f789f072", "indicator--a6839a21-6c93-4e9a-9dfc-5c292308c53f", "indicator--c4ec02f2-a5b7-4cfb-9f41-1a619b5bcf1e", "indicator--298de14c-707b-4bbb-b93e-cf025bccf211", "indicator--58d1df88-86e5-4e58-b7a4-ad92721fc0af", "indicator--c0807c8e-038c-47c7-88a0-073a64987117", "indicator--7b6b38b2-2beb-42fe-8293-735f8dce6ee9", "indicator--32d8be79-4a3a-446b-9227-0f31b4b35dd6", "indicator--dcb415fd-05ed-4625-b547-09de128301c6", "indicator--1f37c3a1-7c9b-4d4f-b020-ed774bf0441a", "indicator--a34eef76-7c2d-438e-87ec-451ffb62e0d6", "indicator--dc76415d-9cab-4342-b293-c044bfe47a74", "indicator--3adac806-c615-444f-9c4b-952ab603f954", "indicator--99ce1c1d-b00d-44a8-a2f6-31d7f10ee239", "indicator--dfe5a69c-0d5e-4cdf-b1be-90442d4a2b17", "indicator--6e5b473a-8220-4e0d-83b6-335625c9b8ed", "indicator--a9a7f903-c2d8-4f5a-8de7-67609b6955ff", "indicator--d662b8f8-6831-4f22-90b6-32ed6f628eb2", "indicator--490eeca6-b307-41b4-a2af-210a234a9a80", "indicator--9ccfdd04-111d-4fc8-9977-bc8a4497ba36", "indicator--0af9cb5a-fb83-4bf7-91c1-7ab88e0f7ea8", "indicator--222f9ead-dbca-4b55-832b-0cf2632e47bc", "indicator--edfb98b0-1f39-4b99-9540-026cebc4eb5b", "indicator--bec442fe-540c-4ad5-b8ae-0ab82049d580", "indicator--9f9d271f-b115-4df7-b21d-372a823f1143", "indicator--85233164-83a2-4b8e-8097-33961a5a3275", "indicator--4610c562-ae3d-46da-9c44-778d982e66c9", "indicator--467cf936-be44-407c-9b92-cc915a3234be", "indicator--00ac76d0-35b9-4849-b028-5d3e850009a6", "indicator--32dbbde8-4727-4c0e-b0fd-fb03edf09ab8", "indicator--ba3c68a1-333e-4753-8f1d-ee25f6fabecf", "indicator--78a2c9d4-f3c6-4a86-8ef5-f082aa8deaaf", "indicator--f432c129-92f6-4604-9ef5-21e93501940b", "indicator--da72dd09-9b42-4e9e-b190-73dc0636a497", "indicator--b22f2072-4d2c-413c-82de-290d8b53cc34", "indicator--771bb793-59e2-407e-ba16-589146cb8652", "indicator--81e8b554-d564-4648-bfbe-92b81766b487", "indicator--70b953e3-118e-4395-856e-26bf09e7abab", "indicator--affcd04c-f3ce-4101-a3ff-9ac2527bcf33", "indicator--8291499b-7e49-4647-b0a1-8363be2c29a8", "indicator--b5e32d0c-7e23-44e3-955d-4333dd37d9cc", "indicator--ff862bcc-fdf6-42f0-8dc1-298252847222", "indicator--89a19001-6fd9-4cea-92f0-d163c53362c3", "indicator--ca0289da-a632-450c-a90f-6821685c8ddf", "indicator--051adb04-9939-477e-b5c4-d52555c69ee9", "indicator--c6ea66d1-7d1d-4909-bacc-9b5151732296", "indicator--de3df910-b0a5-4ca6-9b8b-5b64ddea2d05", "indicator--6f072bca-edff-43ad-8289-d2881fe5e785", "indicator--dd9f671f-7990-429a-844a-80a2b44ec294", "indicator--9d17cc08-a5b1-446e-abb7-ae9a443b2dcc", "indicator--d5aa4c5e-cdd8-4606-8d40-f4092504c0bd", "indicator--48373556-4cfa-4a80-9101-b27a84eaff60", "indicator--cb7c947c-70cc-45ac-83a2-6556fb0ad1ed", "indicator--9d762034-9430-444f-8c65-b8444c74e48c", "indicator--89874631-bd27-43d7-8b49-4491ec643653", "indicator--af0d331b-dd16-41c3-804d-3464b112d1a0", "indicator--c0614492-86d2-4e5c-a78b-04bd70b5a68d", "indicator--2080356e-9a21-4001-ada2-32bd3cc4e779", "indicator--eb8ff553-f6cc-4e93-9b1b-2a825fa3be14", "indicator--5ca7321b-6826-41c8-a130-242e8a89199e", "indicator--059705a7-557e-46db-aa61-d6078b19445d", "indicator--e9da34c8-2959-43b3-82c9-68022f8c0b0b", "indicator--4cd450bd-3f00-43bf-8ff6-b695bd8f6060", "indicator--51a2fe63-d3b7-44f6-bafa-9ae7f2963330", "indicator--fbd7bb21-7fd8-4add-b1fb-b806bdce593d", "indicator--219fb4a1-2193-42a7-bd21-a9a982937c29", "indicator--bd83a6e4-bd7c-4c70-afa4-2cbf7869ef55", "indicator--f695dd3e-87a1-426e-9a3e-9c21eb990129", "indicator--b83a28f4-951b-4cba-aae5-bbacf1d07339", "indicator--ad207693-4216-4a1b-9001-752c368786c4", "indicator--750e7119-183c-4248-a787-9f205a6d5d34", "indicator--4274ba00-b83d-4342-aa51-ad44b60cfe25", "indicator--62316370-dbaa-4aef-b4e0-d79b04e370d7", "indicator--a86671e7-7c5d-4008-adb9-4aaabad71c0f", "indicator--37038321-ed67-4be7-9acf-400d0fd84309", "indicator--b558cffa-a0ca-4d34-a8d3-28db6336b48c", "indicator--742b7db1-3b64-4f2b-92df-e487e9d84ea2", "indicator--999ab091-8b98-44f5-a4c4-2e335be1fc62", "indicator--fd6ef23e-c171-4353-903d-e878a7058506", "indicator--382d242a-7095-4e0f-b57c-86ffc282a21c", "indicator--dc8f2ac9-6fdc-4998-81cc-681ddcd5b783", "indicator--44e7ce0a-9ddc-4ac6-8e5b-94724135d7b3", "indicator--a3767a99-26e0-4dfa-b95d-ced658291c2b", "indicator--05f468d8-de81-4e45-af81-570a7725ba52", "indicator--f0138575-a732-411f-97f5-3aba3f614356", "indicator--e1224330-7037-4776-aeb5-85a749b7395f", "indicator--0d1d1c94-56da-4557-a5e9-d516d1b5680d", "indicator--120cecb8-31fd-430e-9263-46d3ffe45edc", "indicator--9b0777c6-8c81-4c89-b4ae-f508d3339946", "indicator--7a6b3444-0d8f-4cf4-8e0b-99b7ce8f7e48", "indicator--5c2d504e-619e-4da9-a5cd-97d413e8af1a", "indicator--eb9dc89e-2787-4351-8de8-ffde5640b730", "indicator--ed3f4d55-c10b-418e-983e-6e3e3e756504", "indicator--aba94164-2d07-444a-b103-0d6f989a14d4", "indicator--42d5e594-7fd0-4a1b-8f61-6e5ac2f612f2", "indicator--c790269a-3762-4b43-8cd7-920b013bd639", "indicator--e15f97a2-13da-4b7e-885a-7cb054d1b80a", "indicator--925c8b3d-fafb-4934-8fff-2e7589e88ebe", "indicator--7f89d292-ee34-485e-8827-541bcf8217ae", "indicator--093bef10-be5d-49bb-b6c4-ef377243ba06", "indicator--0b03858c-59d6-4399-8a68-a5ab345acbef", "indicator--b050c50f-1d9b-494f-94a0-f2b9047dbd92", "indicator--fa79bc43-36ed-4ced-9568-9aeb1c18010b", "indicator--96790fca-251f-44bc-ad93-8c0ea25472c0", "indicator--5d45f95a-7624-43af-a4fb-48ee3d37308f", "indicator--eab374c4-a9c4-48be-95bb-d81f0831767b", "indicator--e2eb07f3-ade9-4a31-bce7-ec0e4dd1f463", "indicator--3983318b-2354-4b4c-98ec-73381b1ddefc", "indicator--23b35e58-6c65-4cdf-9701-705dddd5476c", "indicator--829c24f1-4b9e-4840-b87e-3993fda5fd85", "indicator--c8cd1a7d-d783-4706-982e-a46779a69532", "indicator--9b0b0e22-787e-44b2-852c-c02e78603104", "indicator--55b77c03-6513-4a81-8f22-cd6b271d68ff", "indicator--2a9a1747-4f43-4eb3-b22b-422850f9e64a", "indicator--4aedefcb-0e3c-4b88-bab4-408664e0036a", "indicator--7dad12d8-3023-499a-842d-79af55cb382d", "indicator--fcb1d4dc-89e4-46eb-9233-315c2bb93098", "indicator--182cba30-4995-4a98-9d6f-ef3397b2d4fd", "indicator--2c631207-b65f-4c5b-b872-69f04216a60e", "indicator--1675e373-b830-40c5-af2f-50cd3f75631d", "indicator--73760491-6a5f-4b48-98bf-3c0a88a3ba5b", "indicator--39776d18-3bfe-4302-94f5-89ada9410940", "indicator--8f17761f-00f9-4c02-9f41-16a9e0368a83", "indicator--d79076c0-7a04-495d-9bc9-089bf80354e8", "indicator--3e21243e-b4a9-4bf5-a6df-8c52823206ee", "indicator--9445bcc9-9ca1-4716-bb7f-e63a8a0676a6", "indicator--03085fa8-0b5f-41c8-90fc-6abb44d3e2d6", "indicator--458398d9-21fe-4c51-a515-f9361b182fa4", "indicator--a981e269-2a75-45c5-88f5-165d47c510ef", "indicator--60c69861-44d2-4af4-9b09-76c19b8cc13b", "indicator--79d5635a-77d8-4f97-9f73-a5e54e447545", "indicator--f7a58581-9af4-4f90-b144-2d1f03a1b5ad", "indicator--e64019df-606c-4a03-8ac3-b0467575c670", "indicator--a98e8a2b-78a2-4a3f-b62b-136350319ffb", "indicator--16fb540d-352e-4dbb-a871-b3731b3fe903", "indicator--9c8d0924-0612-4f91-9d73-4b7d02b31af9", "indicator--25678992-376e-4cec-9132-145dd67af418", "indicator--67ffa698-b1b7-4e70-97ae-1a036fa35a75", "indicator--3eba586d-e012-4e98-9c5e-e058c543e316", "indicator--75337d83-9efd-49be-b27d-7b23f031a05f", "indicator--ad29274c-99d0-459d-a063-3c487a4abb8a", "indicator--c88080dd-d8ed-4c08-82fb-0baf7499637b", "indicator--38a1933c-95fd-4fa4-a73d-f6707b2b4632", "indicator--233372ac-24fc-491e-a1b6-ac78ec4fbb11", "indicator--c26c3029-e337-4d5a-b509-4e055e49eff4", "indicator--8d7fef13-8f2c-4ebe-a2dd-2cb003b39702", "indicator--4cb2d91b-1475-4548-af6d-1ab9170f8e6b", "indicator--33c64714-ec29-4aea-8d54-11f1352be4ed", "indicator--547d71ed-9e5b-4bef-9169-5c8ac9d4bd49", "indicator--8efb3506-dcbf-48d2-a10c-22534827e3c6", "indicator--b93c4e1b-f0f5-483a-95fb-d0a5c4f6a2a2", "indicator--a3d88c64-e7c0-4f41-b290-bd65b3594dfa", "indicator--0204e8d2-9137-464d-a001-376a512b02d3", "indicator--5f2ff235-47e0-4e1f-a1c7-948e8c733447", "indicator--fa485804-3d3c-4287-bab5-21929e405d3c", "indicator--9f514b9c-1747-4d7f-adec-85a97ce496bb", "indicator--3a30ca82-3169-4596-b68b-d7605820e0e4", "indicator--db819d2c-d5cb-415f-af12-198c477d0978", "indicator--81a21683-1f5c-43e7-85f3-fd5433a26c3e", "indicator--a3639304-965a-4327-8a18-661868569dbc", "indicator--0270d255-9995-4b40-bf72-8e8bce25a343", "indicator--772e24cf-8bbe-445b-96e4-90033c088dc6", "indicator--7520fb89-4be9-4bed-a793-8321c98b318a", "indicator--001b5e67-cb01-411a-8daa-b9eb8a4d4a20", "indicator--51a7c94a-ad7c-4339-bd6c-b62570544f97", "indicator--d1030975-2708-4b19-ba71-8f01385c0d86", "indicator--af072d1d-1c09-4735-9ef5-f2a64ba187f4", "indicator--370b1986-41ff-4048-8211-b5ffcdabc77f", "indicator--69cfa5bd-6fdf-4f14-8185-c0d61bd283db", "indicator--d59ff74a-8aaf-49d9-913e-850b4b90fe2c", "indicator--1c0f9d63-240e-4e60-81f1-25b1870dda7e", "indicator--8b6e64f4-fe5a-4db5-86e7-91fdeb7d8f32", "indicator--e6c25189-b8e3-43de-b73a-63f6aca7b3de", "indicator--ac942e80-2e1f-4488-a9bb-2acc46f7b372", "indicator--13bb0d25-a447-4d5e-9740-a1adf3f5b7b5", "indicator--c056ca80-01c6-4da5-9a79-f0d93094b80d", "indicator--f6fdea04-a7f4-44e6-8f20-41abaf470784", "indicator--b8dd6e76-d7ee-4b41-9d42-f0bede818f3e", "indicator--27e8bf42-b959-4c46-b13a-953629a6676f", "indicator--d80f30ee-c706-4418-b87e-053f234eee73", "indicator--7df3aa4e-b856-43a8-887c-1819cee35d46", "indicator--7b937ac5-0201-4705-93a8-fde245df6180", "indicator--b901d182-9fd8-4c84-ad58-35077bca0322", "indicator--286e62bd-847e-4b06-ade7-4096b52434f2", "indicator--57ea3aac-af37-4a53-b0b7-9d20604ae2ec", "indicator--3aebb9f0-de24-41b4-8fbd-a95aee9a614f", "indicator--39d4fb1f-770b-4f78-9f0f-3ac5a1b73519", "indicator--f6392c22-88e8-410c-9181-e44b9d374942", "indicator--170307fa-1150-45ce-9daa-598bdcc83736", "indicator--9be69603-32cd-4338-8714-eebf69725325", "indicator--fe4a5d92-fc30-41d7-ab94-746172eca62b", "indicator--5b9a00f7-e086-4679-a46a-aae189ecb3a9", "indicator--f710ece6-befe-4d72-a467-5eb98c416b50", "indicator--b788e5f0-c47b-429e-8c0e-6b2c962a3043", "indicator--4d1921f0-b493-4a6d-a136-f9cab392467a", "indicator--05d29c7a-c947-4552-a323-67ccd5f271cb", "indicator--f0683f34-5d0b-487f-8cb9-ce99be927c45", "indicator--fbe17648-ce4c-42ce-a66a-b4ae75e2bf2d", "indicator--8dfbc296-1497-4f45-b373-54e8d3ade3a7", "indicator--3ada0909-bc1b-4c2e-b319-70237902e132", "indicator--adafd826-e52b-48b7-88f5-5f7fb8ab2d61", "indicator--81c19bb4-7d8c-4946-a483-9cba17690721", "indicator--b3894ed4-5d79-4ab1-887a-15b6c1c41f60", "indicator--959db207-180d-4f98-ac72-7f1cb8cb3bb6", "indicator--bb2c85bc-910d-485e-ae79-ed763ae96ae6", "indicator--6b20f515-bbd0-4fd2-bede-f9bcb7abb9df", "indicator--d7ebd47c-b00b-4a6a-ab1d-5cff7455d2dc", "indicator--c079bcfc-1406-4c4a-93a2-cae8c7890257", "indicator--749a0dd4-f4de-4205-a586-3ce2de60fa4b", "indicator--569c7c7f-d8af-4007-adf5-410363f23172", "indicator--3ae72bc3-1308-4902-a0bc-395b3a995a75", "indicator--2ddde653-b3bf-4189-8675-deca139f01e9", "indicator--fd62d8f3-4427-4f83-9cf2-9902a00b7b39", "indicator--5c537a9b-f7a4-4598-914e-c6b39346913e", "indicator--2a2d2f28-3923-45b6-9b3a-58ceed17533d", "indicator--91b87f25-6589-44cb-b629-5187c0844de0", "indicator--5b8cf2dd-ab6b-400e-af23-d1aa26584a99", "indicator--38fe3c9f-0ddd-4abf-9a7d-c841613d5c16", "indicator--441a662d-4f63-47e6-b4e0-d6e9385338e5", "indicator--85790de2-6539-4f8b-b564-d924250e999c", "indicator--0386d4e5-3759-4ee6-9bbe-aeeb67a0becb", "indicator--b0498baf-e564-401d-97bf-94744dd0a9ea", "indicator--062d137c-30c6-450f-a877-d8a253ac410f", "indicator--d3cb3833-a263-4230-a087-519711d27e92", "indicator--9b9a8a98-f024-4743-b746-97f95bd7d3cb", "indicator--8e53a362-f8d6-4ead-a792-ff9d1ddd7483", "indicator--4a233f68-1269-4ac8-99c8-d93edef2b598", "indicator--891522f1-b6e6-45a5-ab24-db906e3b47c2", "indicator--535dee7a-f314-4a71-824a-5a53a315807a", "indicator--b1a0a00d-bc70-4f5d-b186-431d8fb238c4", "indicator--0934cbc4-6e9b-49b2-b65f-c1ab486e2c18", "indicator--90900a81-c538-4b19-b5bb-f90a62a51415", "indicator--d4bd5930-ecdc-4bbf-b450-06a1f9ff2d08", "indicator--73586c8c-3607-4c5f-b541-518ec8ab61ae", "indicator--92c67426-17ec-437c-b8ca-de2632dd4f2a", "indicator--dc70548c-c81c-4036-a939-bec53312c28c", "indicator--f5d9355e-9d78-4d30-ac20-89c28ac41abb", "indicator--03db4a58-5830-4cac-9819-b1093cfa7fdc", "indicator--5444a314-b70c-4e0c-95b0-ef8d2c08729c", "indicator--01708783-77a3-43f7-9215-cfccd932cb51", "indicator--b3f35c86-4205-46dc-8d21-821b6199c6b8", "indicator--70708848-b035-4fbf-90cd-e8a6680a86e5", "indicator--8f0e2f31-0245-42db-a654-3e1a5266e8a7", "indicator--7f46deab-223f-41ea-8a1a-54794388e71f", "indicator--b4e30ed0-db1d-4f1e-8bef-6bbeb2a8def5", "indicator--9ec59f2e-af3c-480f-8274-432070b875bd", "indicator--d0962af0-30ab-4634-84ef-fad43b68a0c2", "indicator--2cf8b188-1c6c-47e3-b688-e4279d24e4d8", "indicator--70b7f137-a20e-4b62-a616-f072c38eedef", "indicator--0ce1e7a0-1542-4e9c-9fae-988b291c9fe0", "indicator--bea2bfca-494b-4d31-b82d-2a1420b2cdce", "indicator--9b9169d6-aa75-4ab1-aa53-e9d672184981", "indicator--0c0a1b17-72b1-441f-a2d4-7f2c1e5c0646", "indicator--909a29a4-34d9-4716-a465-793a5855da09", "indicator--550251ad-4201-4ba9-907b-5b6da540dcfc", "indicator--b1e2ee4b-89c1-4036-9f91-8a7e3af9f14b", "indicator--ae65775d-9b87-41d5-910b-0d520a1116a7", "indicator--9c5f7fbb-c4ae-40ec-98a9-1c8e97f93061", "indicator--c0c01d39-7682-4c19-acba-d0d88e471644", "indicator--09100523-4a46-4b79-b180-592541cfb998", "indicator--765f3f10-a05a-4168-a84c-9fcb9e559b37", "indicator--f89df5b2-6441-436a-95e2-168d41f87959", "indicator--5c59ffe7-6c3e-43d0-a2a6-c41774bac59a", "indicator--f1bc12e9-e7e1-4da2-9b97-8504df5d7481", "indicator--45c91d01-58f1-4e19-bf9c-c5c72d119875", "indicator--0558a91a-ab84-4083-927e-961cc7b10ab0", "indicator--0689f516-dda2-4663-a2a4-4d5ff83bfc5d", "indicator--dd04e0fe-8ab2-40e5-b262-a821b6905666", "indicator--d413199b-0df1-4d90-bb55-8b08e90b4180", "indicator--eebf7328-0e04-44d5-82d4-042569a61dbf", "indicator--a666ce10-68dc-4b90-b40e-2b5f02c88cdd", "indicator--afc87585-10c0-4ee6-84d2-e0c0e7a6305d", "indicator--61f1eebf-a6aa-4a36-b59a-c4ada2a604bb", "indicator--33d69b1c-1d96-413f-9ac1-8a382d504c01", "indicator--5fce807f-7d6d-4cbd-a46a-a8bb211b35ab", "indicator--e6b1f62e-ef70-4101-be17-e20a216e3235", "indicator--1b88e6f0-08ba-4f53-bbc8-7c05a7473794", "indicator--69154b06-1abf-41d4-b21f-1c602022dadb", "indicator--427b0e1e-48b9-41d1-a905-74ed606c845d", "indicator--34510df5-2cf4-4011-85c5-a7d9a44331c8", "indicator--562826b6-09a4-403c-a073-e53e3a8237e0", "indicator--c5d9cb23-be7f-4d22-9289-1551140fbaa6", "indicator--ae11a69c-b579-4825-8771-079802f624e8", "indicator--d087b50d-9cb2-43bf-9e6b-c2c3f5ba1a92", "indicator--97df3ac0-553a-464a-b4e8-7eda39683261", "indicator--dc6e7beb-da82-4ae6-8932-d8276d0e96cb", "indicator--9bce19dc-7d85-4e5e-b6ce-d5389d09acbc", "indicator--1272a00c-6bec-4ce6-aef5-32c50ab68e8b", "indicator--ceb4e4fd-ca21-43b4-8e93-1fa76acc6f2b", "indicator--4b76be43-bf03-411e-a517-4c699650ffd9", "indicator--06e43a24-1712-4158-a992-90333f827735", "indicator--3934c47f-e269-4d9d-8246-75280925d95d", "indicator--35846f63-98a0-4b57-9bc2-74eab141d9b8", "indicator--3f924f0a-5121-46ca-9512-aa3b8d6cb2ee", "indicator--fc5a2179-2ec4-4749-af1d-24d822bdcf51", "indicator--cc90ae68-a39a-4be6-ad0a-4cd6a0c60b57", "indicator--c6667197-42a6-4d22-a246-2770a7f5f6db", "indicator--5757327f-b7a9-42e9-99a2-fd1cfe621b49", "indicator--a4ac0067-5471-4efb-9011-ff38f604b383", "indicator--bc7f2852-52a5-4acc-bd99-fee47fe76959", "indicator--17eff31c-3090-478c-a781-455a8e6ffa86", "indicator--5a891c72-e33e-47ef-952b-45dcb7269f50", "indicator--72a5a54f-d42d-435d-bca1-4dbc5d3b60f6", "indicator--79f4e77b-4633-4c04-a00e-0e58029ede62", "indicator--5f6bbf40-e8a6-44e4-b6ba-f0612e206581", "indicator--2fd7ecee-1ba8-4837-9bd3-d3004350be09", "indicator--26fc3332-74fe-4823-9ed6-92b127a720a9", "indicator--fdbab191-9b32-44fb-b2a6-2d5fd77e7cab", "indicator--0fe3906a-8f9c-444d-9794-102800c618fd", "indicator--9d5fbc60-01c1-4a57-80fe-7e25efc499e8", "indicator--6a87578f-e5bc-430c-80e0-435cfa317e2d", "indicator--ae09fae5-bbef-4a10-88b4-c83a6e095875", "indicator--44956cf5-f1e6-479f-9581-eae668517fef", "indicator--ae7ad807-bb99-4a45-b8dc-fa3dfab2629b", "indicator--40a2a164-37bc-454d-8695-331e04530616", "indicator--78de9c09-768d-4eae-b910-63f042e5fcaf", "indicator--1068662c-401e-4149-aa27-847cf19dd199", "indicator--eeac2a7a-4d99-41ac-bc44-7ff67a519405", "indicator--f47188e9-6aa5-4613-ae52-330912f5d08e", "indicator--9343c40e-b27e-43dd-8841-ce59b76dc56b", "indicator--940e617a-3e03-4d87-9511-ec6d278fbcab", "indicator--eb37e178-8d75-40b7-8ac8-dca57cc611dd", "indicator--26bc6aa7-c238-4115-82df-32a4635f0b4f", "indicator--2e48684f-987b-46a9-aecb-484b8f905e0d", "indicator--b0d18e2a-fbae-4dc2-a525-18cf5b34ed8c", "indicator--cb94e153-d956-43a8-9cec-5e3a108df636", "indicator--40c38f57-f329-4481-8a99-95afdfbe66b9", "indicator--4c2d9bfb-d2ab-40cd-9b8c-ccaa229e396f", "indicator--b83fc5fc-b1d2-43d2-8a6b-4701578d5522", "indicator--fc148e0f-33a8-4c9b-8f76-7df04d251435", "indicator--91bfe497-465e-4141-a3f3-65c0ebb627d5", "indicator--6a8cd585-4ab9-4897-a79c-ca889f07b61d", "indicator--1bcf084d-0ce0-454c-a950-db89688383d3", "indicator--a6ee2e5b-e2c5-4776-af1a-6d0c5dd42588", "indicator--04ee9f0a-fb26-42d7-b50c-ec261ee3b213", "indicator--bb30a57d-f83e-49b9-8ecb-17b031a4d078", "indicator--f1915e3a-1f32-483e-95d6-f961df1b99dc", "indicator--8c69cfaf-e75d-45d6-8611-b7739ff9c40e", "indicator--6ed2eb1a-1400-4ebc-a8d2-673f3130b094", "indicator--834a5994-6a39-4d8f-bcd1-438a3513f543", "indicator--cb815f84-4cd0-40ea-8ac0-7b0d922842d8", "indicator--a064fce0-f352-4a77-a9ac-8fcf36e186ea", "indicator--ffdb7f0c-7799-43a5-87bd-e477070ef657", "indicator--623aaa92-c471-4d7d-b99c-93faadb12faf", "indicator--22361af9-50a4-4a95-845f-f55cae7cb181", "indicator--2b3a6e03-9027-4090-8abe-1ba210ca8b75", "indicator--0282be45-7b84-4567-8ec7-ff0902a86491", "indicator--b0f40dfc-758e-4c85-97f8-f318362d35c8", "indicator--049b41c9-e4be-42e7-8ca6-5323aefef2c1", "indicator--df91089e-c3fb-42a4-9499-c6791b9519ec", "indicator--f3313e58-e7f8-48af-bc36-d34a3a784183", "indicator--c3866e5e-3b1b-4bad-a04a-8be53020a514", "indicator--4128ed38-fa0a-47d5-83f2-ea6ed2e87a53", "indicator--e64236a1-b3d0-40de-8361-202053b9072f", "indicator--d622c123-dec7-44f2-9790-e3c936992756", "indicator--1e74815c-315f-4024-a90a-4d67cf6a5dcf", "indicator--b395b018-47be-4233-8adb-45856e49ab3c", "indicator--2c2dd59a-e0d1-4d7d-a009-1f3cf69375c8", "indicator--35607266-40c8-494f-ab5b-4d29feee55e8", "indicator--e1649e29-187d-4e0e-a9fa-dd5cccdccd7e", "indicator--a476db2c-2ed9-44ba-9bcb-3e9c11dd7159", "indicator--e7918d74-9f10-46b9-a666-49b1d2a14986", "indicator--9787256a-a16d-45a9-a134-4bd443247281", "indicator--cdd4dbb2-373a-423c-9507-0bdf2dd4dd7b", "indicator--afbf88bc-20a7-41ab-85ae-32ab45e4915e", "indicator--81f58b91-3c98-4504-965f-3482a9fa00fb", "indicator--c2d96910-28a5-423d-a6ec-fdd7ae0a84cf", "indicator--51fc59dd-039d-4067-a945-d0ccb97e8936", "indicator--da1e628b-99d0-4b5c-9af4-208c8c883ca8", "indicator--561db47e-f6a9-41ec-9214-9ff0322e78f7", "indicator--4f9c9f07-1574-4922-84e3-f1a41d557c99", "indicator--628ac2c5-e34e-4353-8fa2-623bb12bab31", "indicator--284c4794-953f-4617-8485-b6ab2b0c3428", "indicator--9737f8e9-738b-4c84-80e9-086751465507", "indicator--7d56d14a-5309-40ed-a470-cc3d1e52403b", "indicator--888cbc39-67c0-49b6-ad9b-0698ad196bbe", "indicator--e390f701-7bc6-4972-9091-943856b1c22d", "indicator--e6cb63cc-f1db-48d0-b3d8-89e742997c9a", "indicator--471c2ab9-9916-42ff-ab02-b08ff0d66fdc", "indicator--fd0ef237-9d6c-4851-999b-2ad5958417c3", "indicator--08be803e-0e16-4496-b58d-ac4a5c5b8256", "indicator--c6651bb2-b5a4-4112-8127-7af8bee3c0e5", "indicator--b14740ba-38ce-4dcf-b2eb-736071f4d681", "indicator--4b1b1a2f-be80-4927-a1ee-ffd85f18f401", "indicator--87fd9a61-0fb0-4085-8045-9b6f12ef66ef", "indicator--a9a86ba4-6036-4102-91e9-563a50fe75fc", "indicator--992da437-776e-4ae9-b6ec-5615594ee063", "indicator--6a4d8c52-c109-4217-9dbd-b7f34d23b3eb", "indicator--1bd9472c-1c5c-43c8-80cc-ce280b3d959b", "indicator--38692ff3-0d61-4123-9726-dc3b81bdb2ce", "indicator--497f6698-4eb8-40b0-acf8-92e61666b943", "indicator--b8b1a4d6-ad7b-4083-8c75-06bd212d41ab", "indicator--d36a7de3-df3a-47ae-a46f-43cc9fa6fe62", "indicator--bb7987d1-7c10-4d87-bed7-3f87ff8d8df9", "indicator--c4c438f2-a4ae-4bdb-973f-8554c09cc47a", "indicator--e83d035b-4698-41e8-98ed-6d0fbcfb6218", "indicator--65b7488c-40c1-4fea-927b-9f6521bbc7bf", "indicator--17b7a6b5-d6af-4cad-9ced-72875bc3e97e", "indicator--b4c5d496-814b-4815-8224-6d1c8c81efca", "indicator--7c3cdcd3-d682-45dd-b851-51f6fe3bdb53", "indicator--aacb468c-5029-4107-aedf-844a7f3ea956", "indicator--80bdf2cd-514b-47d2-bfa2-7e161afbb05b", "indicator--22969c4e-09b5-432c-bf56-162c35897fb5", "indicator--b3087c4c-0347-49a2-9cb1-535135dcc279", "indicator--87ef2867-1cf0-4d94-b572-91ae8c1e0613", "indicator--4f65abd4-5efd-46e7-b074-0eac8002106b", "indicator--675f6237-189f-4269-8486-55e21fd354fc", "indicator--55102e5f-8441-4e1c-a49a-3a0e52a10269", "indicator--79206647-53a7-485d-a0b4-c558a7b7d35c", "indicator--03cde28b-c0ff-4e96-a90b-aeb79d47cf91", "indicator--0e1cfd4d-c57e-46cf-be80-682c6f9c4af2", "indicator--a99bd42e-c6be-4f46-a95f-d820ace1b907", "indicator--26ba54a3-c621-4ad7-ba48-337687f9da62", "indicator--41b03b34-5166-408e-a63c-a959c23602ab", "indicator--89e401d2-669e-4a2c-9a07-5ce680843b56", "indicator--e8357584-d3a1-4ceb-a0a1-a8adbeff7f72", "indicator--f11dc456-b5de-462b-aea7-b5b1e888f087", "indicator--95dff5b6-2587-4843-9b1d-5bf3fe289a1e", "indicator--3e88f0a3-449c-4fcb-a784-bab523d4d8ff", "indicator--268a7487-04c3-4f75-a77b-1c5dcb7561c2", "indicator--4d055158-ca0b-46c8-9c52-56857c8fe3a7", "indicator--710489ec-66ea-41d2-aaa4-94c32afaf91e", "indicator--fbfaffcb-bd32-4445-a698-4da071642d5e", "indicator--97c9f5b1-69ac-4f02-83ab-3a09c762d59b", "indicator--117d19f8-2ec6-491c-8bdc-25c7880b5fe8", "indicator--9761f6f2-3515-439b-92c7-743d908b48ca", "indicator--0ee75d49-fad9-45eb-be8f-6a95a4c5223a", "indicator--7a0fa06c-ab9c-4c78-b585-57e81cf7f62a", "indicator--72dcb18b-4f8e-4c23-aa69-55978b0b3bc6", "indicator--c16486b9-e009-40a1-929d-783f0c8a7737", "indicator--9a0fafb2-9ab0-4b8e-95bc-f0ec86475472", "indicator--1c365c52-9abd-4850-9125-816eb056c740", "indicator--25422c40-b3bc-498d-b5e4-2cf06c21bcf2", "indicator--5e74c485-2ccd-4543-b1a4-39b2676b1422", "indicator--b3ab5a0c-cb5b-4cd2-904e-b7b7706639f4", "indicator--e168b4f4-6b10-407c-8a95-222fe4140fee", "indicator--d9debc93-fcb4-4594-8994-815502c880dd", "indicator--1f350051-9e98-4ec6-a60c-578dc8151884", "indicator--bd279a75-cbae-41b6-97f7-e7e1f8117d54", "indicator--b99bba69-37fe-47a7-a0c9-02e8f22b1e6c", "indicator--fe202f53-84b4-4b79-a69c-54ad4354166b", "indicator--f2898500-2b14-4b45-8416-fd896578e076", "indicator--0e55518e-63ab-4c15-a398-b72fc7fd542c", "indicator--f683af0f-a00e-4a54-b858-207120615874", "indicator--57cbe50c-d0d0-48cf-8bd3-b00342a1e212", "indicator--b887ff8b-f8ca-4fc0-9164-b29c5edf22dc", "indicator--a8ef57c0-3774-4438-b0c2-42c65184fda6", "indicator--4d455974-2bf8-472a-b7fe-9de9ded725f0", "indicator--047f8fd6-82e3-4901-b320-38446adc8f29", "indicator--b3df44c3-d2ab-4575-87d6-5ce775d27e88", "indicator--370971cd-0e75-4806-a7da-a9529a83b581", "indicator--681d06a8-eb98-40ff-a2a6-004e2a4f91b1", "indicator--35a0326f-497d-4111-a7a7-210807589802", "indicator--56c77808-35bc-4592-aeb9-3fd2d6faac2e", "indicator--f4f80bd5-894e-4a59-bdad-f35a60920fab", "indicator--aa2cdc0a-fcf4-4083-87e7-ec1a10a70e03", "indicator--437140c5-8ce8-4f7a-9068-f3d84ba6ed66", "indicator--ce8a0520-051c-4ff9-8a2e-7e685113b89e", "indicator--5146731b-1e17-4f3f-82ff-8a733b6360a3", "indicator--e59aeb77-5078-4777-8dd2-c3d441ba4be9", "indicator--f60beb72-3d51-4875-81b6-74fe6a69c261", "indicator--975d0fbb-584d-4327-bd50-b6f855b0b174", "indicator--c5db3e83-e494-4345-be0c-49e0d07b767c", "indicator--9c413c6a-784c-4a94-83a2-10654a6a3e91", "indicator--c8644452-3e6d-4d80-b45f-d8d81e62b254", "indicator--26620210-8ecf-4c22-a701-c3e19104857c", "indicator--bb1ddcb3-c5e2-4ccd-9d14-1b8cde640a97", "indicator--39092b94-aa1e-4be9-96d6-c286750a3ee2", "indicator--18cb3f92-a3b7-453c-9bd0-2613471e5688", "indicator--a0b3d56a-b8d3-495c-97bc-85dea58d7b2b", "indicator--4297c705-a492-46ca-a0f1-8c2c4fb6e2ea", "indicator--54e6fcb5-76d9-4a56-8211-a66498c24b80", "indicator--375dd917-2f82-4e2a-8f0c-dccc6deb850d", "indicator--19437582-39bf-4876-92b4-4704f14d7650", "indicator--5841a0fe-98c4-48ec-81f7-f9c9726276b1", "indicator--2cba78a0-a13e-4046-b0cc-8dfae5ced0e4", "indicator--097eefd5-a414-47e7-b509-5616f9cd1e31", "indicator--204c96e3-0ad8-429a-9534-4ebf918c08ac", "indicator--924f72f1-c68f-4858-9d3c-f090805ee0f2", "indicator--5299a2b2-b0b1-40fa-b3c9-0c0acf9caa34", "indicator--d426f1c7-aa58-459d-ab2a-7e61f793f3b6", "indicator--acefc834-e370-48f2-b41b-beb22bdf2808", "indicator--b6f38810-b542-4275-885b-c0503e449c7b", "indicator--a3ad8662-6649-413b-9d8f-635d4afafb10", "indicator--b84b89d1-d2f3-431c-a150-3a8ed4ff8d6e", "indicator--088bb06c-3320-4637-a5bc-c5deba3925ef", "indicator--22a2771c-d3ab-40d1-b470-3f7374d9914b", "indicator--4a4febdc-1b32-4bdd-8284-8e20330c145e", "indicator--2377c5c4-417d-49da-87a2-ec04b0236f6a", "indicator--60586a7b-ac2d-4b21-a15a-950974bdb70d", "indicator--e7c3482c-c76a-45d2-93aa-ec8ee7795bfb", "indicator--e8d6d2e0-d48a-46f0-befe-6552c495cd66", "indicator--ed27ecc0-ca1f-496e-9904-48b5bc753ae3", "indicator--2cebb85f-1323-4f5f-803c-1297483a8dbb", "indicator--b1d911da-fc3f-480d-91ed-1ff8e1154d46", "indicator--e1c00136-a9d3-4d98-ae85-f3f70bfa1f25", "indicator--ff8d654a-cd7b-403c-b15a-c9222b2951d6", "indicator--2046b233-a3ff-4181-9937-70ab888bf1fc", "indicator--666c5e32-367d-46e9-9d20-2c7ecb961a29", "indicator--32472d44-ca6a-41ad-b816-eef6c0a6bbf0", "indicator--79b7887e-e799-4e6f-a2cd-c4a00f98b4ce", "indicator--60508a26-dc5c-464c-815c-c9be232a4589", "indicator--7c0e1715-36d9-4c13-9826-f29f395e5566", "indicator--2d280b39-db2e-4c25-a205-987081d85d35", "indicator--4427a281-5076-4f9f-88f0-9beeab9bfdf8", "indicator--71fe9ba1-c544-49c9-b3cc-6dee4d860ae9", "indicator--5f2ab9f0-28d4-41bf-8dee-9aab50d546b5", "indicator--987f8fa7-2885-49e0-9d54-55e52f595bac", "indicator--ff79657f-4b41-477b-9c2b-1ca955640820", "indicator--faf109eb-52f6-4868-a8a0-25337491a4b4", "indicator--c939837a-d11a-441f-8e81-f8ef8a562554", "indicator--282330f3-00e2-411d-b595-a768734d52b4", "indicator--bac85344-2aef-4c39-baad-b357d42a5f2e", "indicator--2f3c0788-5467-40a3-9f3c-4bb0ea8d6138", "indicator--d796103d-4f2c-43e1-83ee-42fa49cc20aa", "indicator--e26ebad6-af2f-4deb-be64-8f5a396be9c8", "indicator--ee0f6d9e-9ba6-4f60-8cb5-265b6649b99f", "indicator--53d1ff73-cfde-48b2-ba79-918f6803adda", "indicator--7925a7ac-8769-4813-ae7f-f489b5b101a2", "indicator--ead44f4c-1968-4854-801f-2ec2a86c467f", "indicator--b24aab06-2aaa-4501-b29c-4cd4edd7ccec", "indicator--70933180-c739-4979-ba61-9dcb3745b1c0", "indicator--49984941-e2d4-4231-affc-c23fe79c3e0d", "indicator--dd34a511-d911-4a3f-8687-41917f3b3ae3", "indicator--8f2b9b22-a333-4355-97d6-696ea4511eb8", "indicator--ef73416d-0798-4986-8677-104c1dcc07b5", "indicator--8346bae6-989f-4c83-a344-c02e9e585317", "indicator--2bf832d5-40db-420c-8841-6aede68c3c7a", "indicator--9e4cc1d1-c285-48d8-98a7-1fd37342c7b9", "indicator--3c48595f-4f38-4919-8f8a-346e158c558d", "indicator--751d8f52-5603-4cfa-a7fc-c9c40b784e61", "indicator--4e28ae60-618a-4b6c-a1d5-b2f8ced7965e", "indicator--a57d3229-4508-4fdf-b9ba-e97d63d74716", "indicator--f77a1621-1df1-4212-bc0f-5ff0440f123c", "indicator--c609ae19-6392-48c8-ae18-12d461d3fb3a", "indicator--ff0a56b9-7879-4e1f-bc38-e023a1c04232", "indicator--9f148bca-3d69-4c30-82db-a93f26f85f11", "indicator--b7037b6f-cd73-4018-bbf3-f53d056a43b9", "indicator--f041f6a2-1acb-4c3c-b8aa-f6af5762af96", "indicator--039c2470-85db-45d2-87fb-9ba9904d3f72", "indicator--8a9dfd6a-2e70-474f-94c8-1ec4f3947bd5", "indicator--a3865022-03bd-4865-82d7-debc0307974d", "indicator--13d4aeba-f619-4c74-974d-8818655e424c", "indicator--fef31414-47bb-4d2b-90cd-b12a204a8e30", "indicator--3e1c22c8-c66c-465f-b05e-916226d8b30f", "indicator--6f0393ac-9101-4994-9367-aabd5d543c12", "indicator--202d7f3b-54e7-4313-af6b-ebaab6290b23", "indicator--40b01645-8b6c-44ea-9b1b-ca27e0df7999", "indicator--9f9f8571-8a57-4463-a172-148ae7ed4e1a", "indicator--31d9de84-5fdd-43dd-89fc-d1719a2cd7ad", "indicator--094b3790-8406-45d2-a4d3-2ec8f5cb4418", "indicator--978cc6d7-d439-4471-bd30-760960f48404", "indicator--08c968ba-2807-471a-aef9-d4fbe3ec38b1", "indicator--b6407f4e-d12a-4d2c-90c9-d33f84177599", "indicator--f7a15739-c84e-4b1e-a75a-16637a2ef149", "indicator--f535a933-bc02-495e-8a14-55409bc19bed", "indicator--2e748227-84a0-4e8f-867c-55e702439c27", "indicator--aff41409-9024-4440-83d2-1a227050ab12", "indicator--dcf1a6bb-bc1c-492d-b34c-3f2d9218dc0c", "indicator--4ef7d869-4cec-4293-a46f-cd03bf588c7d", "indicator--30e1a8ff-ca9d-44c4-b450-79fa4adc8283", "indicator--ace7947d-26cb-4e06-ac38-986df500d58d", "indicator--379781e1-5a8c-4cab-86af-cdd23de604d6", "indicator--e5578d77-71b4-4174-a802-ba96183c057a", "indicator--2039b482-47ff-495c-8014-2a152632c6f4", "indicator--d894833b-acad-4cf4-8c1c-7a64a49943a6", "indicator--426680dd-cfd1-4c53-9861-772c495cddf1", "indicator--659f2a31-d138-4844-944d-e2c86ef3b890", "indicator--725182e6-6478-46d2-a15d-f7bd4a28a2bb", "indicator--70d244cd-c8b7-4fcf-b6d0-02ade3e8b20e", "indicator--63877678-6122-484c-9b41-cb2b89e48252", "indicator--e06a0a57-9333-4501-ada3-91fb76bc3c20", "indicator--d86364f7-331e-47bb-b78c-05cdc975574f", "indicator--feef25e8-f42e-4e54-ae3e-f8221932aa55", "indicator--543c253b-94b6-409c-8b23-446c8195a2d5", "indicator--25c856b2-4f7d-475a-be3f-13812e7b84c8", "indicator--f380506f-4b01-4d88-86b5-72ada5a2af56", "indicator--993be262-743d-4e0e-8455-5a51ab4083e6", "indicator--d0558a98-d368-4d1d-92c2-0761ee5d777f", "indicator--6334b7bb-574a-4248-8b1d-61fa4df21d75", "indicator--8c6b398d-be96-4156-9651-f9a9ae121ef2", "indicator--62728a73-6fd1-444e-9be4-0df14ae7a2a6", "indicator--efb2b28f-25c0-44f7-8aeb-aa7ec9ffb8f7", "indicator--938fda56-7876-4557-8392-948d2aa5353c", "indicator--1ff9d59a-24a8-407c-9c1b-f2a65878367b", "indicator--e0ff4bca-500f-4712-9a5c-f74ff5fdaa17", "indicator--7b3cd42e-07e1-4a46-a463-a0d60cbf6d4a", "indicator--b3c6a504-22e5-44ca-93ff-99d592d77370", "indicator--c44fa438-9c7a-4fa8-b55c-0bdd32e63beb", "indicator--9db9e4a9-65f7-41a4-970a-19a18c102763", "indicator--39dc51dd-05cb-4782-b991-158fb67e6c1f", "indicator--b4705414-c6af-4486-97ba-94a107fae006", "indicator--18c1e0fa-b8c4-40b3-b841-0a88b179d8aa", "indicator--dca80dbf-8a8a-4208-b1dd-745666c071be", "indicator--00afdb9d-9d02-4a62-9c3e-f68402517ae0", "indicator--e45d806e-558a-42a3-ad24-c374e148e7f4", "indicator--5805e085-4aef-45c3-b7bc-c72c42fd5052", "indicator--9016eff6-ffb6-412b-ac08-054e67a4d3d6", "indicator--634ca9fe-e6a4-4602-afd5-0568995dd146", "indicator--5d081604-065f-4016-9a0d-26effe9fde35", "indicator--33b546d0-09af-4d64-b8ee-c98d7177f9d5", "indicator--7fef286d-dc9f-478a-8a5b-b44f79a4e9e0", "indicator--9abb69df-faf6-47ce-a5ef-c6ea842a3beb", "indicator--8bf91141-bb84-4740-be79-b04a7d945f0a", "indicator--345be22d-d31b-4984-9ce6-23f0b953f1d9", "indicator--91d9e41a-84e6-4921-b20a-4e6936256833", "indicator--e2ce4b9f-ffae-4ca7-8f71-fe46587cd6d8", "indicator--69056357-8149-421e-920c-0fcdeedf272a", "indicator--3132d340-7aee-42ef-b8cc-6cd6508b9f81", "indicator--eb30501c-3260-4dae-bb08-363662f76b53", "indicator--d2289746-5bef-425e-b436-09bea21ca929", "indicator--b7053c22-3e05-4429-89cc-ebd10ccdd645", "indicator--eaaa6c9c-e9ad-4446-ade6-e59bbcddb45d", "indicator--132e99eb-dbf5-4d54-9547-a01eed8abf09", "indicator--cd02d3f7-bcd3-46b5-897b-75ec63a0f6b5", "indicator--cbb5a1cb-31f3-4607-b230-bfc2e15dd162", "indicator--10f764ca-3272-4680-a9eb-0fc38fdf639c", "indicator--bb42c36c-0e42-45f8-8a97-d1b5b766ee15", "indicator--921c7b84-8fcb-4fb2-8a9a-9053a68157fa", "indicator--c9f68471-06cb-4ca1-9e05-220b2b34a855", "indicator--b627af59-2dba-4149-85a2-7b460a75db83", "indicator--17e8882f-1c0e-4184-a9ec-0c0c5927320d", "indicator--fc91fa5e-b4d7-4400-bda5-b32e64a980bd", "indicator--3cb0cc1f-ffa8-4d41-995b-b1c3c133f5c3", "indicator--140735dd-579b-434b-b21e-f287efd7c3ad", "indicator--f29b0d64-5333-4756-8d3b-e89a8117e2a7", "indicator--809bf960-20af-422b-87af-bacdf96fb857", "indicator--1629c54e-9f33-40ea-b752-00fbcbede09f", "indicator--ea96df6a-ae38-41d4-91f0-d1dd52e5fddf", "indicator--88195762-25b0-4386-9a5e-672173233257", "indicator--47bbb8e7-754a-454e-a270-502dd3f3a84f", "indicator--7ea39aea-bc45-4d7c-a6b3-bf592991271f", "indicator--66df493e-e7e7-4aae-9a53-c6ba0cd5d817", "indicator--e8dda8b6-a41a-42a2-9250-d46616cb7ada", "indicator--b3a906b2-db59-4698-9fc0-05cce5249003", "indicator--cf672c71-a9df-40ab-94c6-1e6a3beb4ddd", "indicator--562dd7ae-b1d6-46fa-9399-f409c139112e", "indicator--ccb1edae-8075-406c-bc48-a8fc9fbbe508", "indicator--c72a9546-f40b-47cd-886a-7897f61a1ee3", "indicator--4c8cb7ac-1257-4d44-a476-db970a103961", "indicator--0fb5edd1-654f-4295-9e5f-6d0ed0051021", "indicator--eaf4e345-295c-4427-92c9-e5f8ed43e5c1", "indicator--998739c8-128c-4c97-887f-e4f44e56fb74", "indicator--5866f792-ceed-4e45-bbee-89ab1bee1958", "indicator--5e5c7d1b-a6f2-48c6-90c8-4d430693cde1", "indicator--9562e205-5748-4176-8bae-f4284a4863d0", "indicator--c2635da6-33a8-4c11-88cc-165a814ae7c1", "indicator--65c919ce-49b9-4a1b-9f08-9cdc4f836dbd", "indicator--f84fe7e6-a1dc-41bc-8f8f-9b0e3632a9b3", "indicator--18dc9ebf-06e2-4444-8444-146f02feb73c", "indicator--aca71839-241c-4634-8bfe-1be9c22dff63", "indicator--6c2cc4a7-5415-4101-895d-5494b67a20e4", "indicator--dfeb83ea-3371-4723-a4b9-2abe68463962", "indicator--db0265d4-b255-4b9b-bde7-a7d7400ff068", "indicator--499029bf-7e04-484f-a23d-3cd7cc2bdc92", "indicator--ed751540-ba88-4098-a687-09828284e950", "indicator--3a7c5fdf-a47e-48d9-a532-e9b69e60b495", "indicator--9d0d3b41-df8d-4a47-9bb2-4785cb292b96", "indicator--a492b62f-1b30-4c00-ae67-5b34b1377e8e", "indicator--4a11615d-1bbb-40bf-aa03-650476f44a2a", "indicator--d24235a1-823b-4e16-a3c3-6eca057a30eb", "indicator--88123e18-d176-45ef-9c28-ecaeb5c2f2c5", "indicator--037e3152-a2e2-40fd-93ab-27783cfb8362", "indicator--61df6683-259a-488c-aaeb-b8ee1fa0f651", "indicator--d4edb14e-8b07-4617-812f-646c6abf3e06", "indicator--03815a86-1533-4b59-9839-1c061bc5777c", "indicator--12cc9be2-b085-4732-815f-2a1880f69b83", "indicator--4a73db14-76e9-4214-a72c-b41e68ee19e5", "indicator--5c3b6134-e928-4f8f-8fd0-001a90304d94", "indicator--74520958-d8e2-4d63-85c3-d1b9dfd0b1dd", "indicator--168911eb-751c-44c6-a71e-3fb817a62aad", "indicator--04c1b02b-5cb7-4830-bb1c-643c11e545c1", "indicator--48911b57-1007-4b91-ac78-7d662b1cea09", "indicator--8e8bc89f-940a-40a8-8a37-174252aad402", "indicator--f6d9e952-0f9b-45bd-b41e-fac7dda09fcf", "indicator--2889f478-7f3b-401b-b87d-55c6a953cc29", "indicator--1fd21d98-8619-4ba1-95d0-c360f715e200", "indicator--78a11f67-df4f-431e-b75d-86b34da65197", "indicator--76d8d6cb-dc38-4279-816d-a492643424e1", "indicator--7afbbe65-b558-4df7-bb00-b45fb99e0e4b", "indicator--0f66213f-facf-4317-a5cb-7473cf89d985", "indicator--074e3331-bf11-48a9-a286-25b3e637a341", "indicator--44384045-7dd0-4283-b137-e60d421bddc8", "indicator--e682b9c0-1ee7-4161-99b3-50d3a205c9c6", "indicator--3dd34744-6d81-44d5-9ad5-4354d454279c", "indicator--0e3c9af8-2d23-41e9-a1b3-a9ce35edf748", "indicator--2bdf142e-14a0-4f87-9202-b2141b89bbba", "indicator--6990c905-d819-4aba-bd83-a71b48b0ed10", "indicator--26e734ee-1ffb-4052-af43-d241630772b6", "indicator--96628885-602e-424f-a19d-57939c43fb51", "indicator--59eed8d8-8744-4c6a-9be6-e6f160cf91b9", "indicator--9f9842b4-d6eb-4539-8edb-8fec8239bc2e", "indicator--5d773f34-b668-47fa-a3e8-2da5bf352464", "indicator--edef1a67-48c4-4f4e-a4d8-6e63a5ce8b15", "indicator--5773cbd9-dab7-437c-b067-21a032a48d75", "indicator--7ad395c5-b594-4259-b070-7410e62e7320", "indicator--a27f6be9-f214-4e86-b35c-7b165cd3f7d4", "indicator--7dbfcaca-3109-4992-b154-faed808f635b", "indicator--084e5e7e-6413-4d7f-9fa1-7432840fc9fc", "indicator--7d86b3ae-7c40-4868-b08d-a16881172663", "indicator--a17dca50-b282-495f-85f5-5c140e3e09d6", "indicator--f8b51408-473e-44c5-b41c-41bb8e8ff907", "indicator--5d091e7d-db67-4731-93be-817cbba640fc", "indicator--194e959a-5355-4ebb-930b-632c42a18dcb", "indicator--c8f417c5-01d2-4e4e-841f-4fa00aea5677", "indicator--03e69646-1df4-4858-881e-f2f92fbc265a", "indicator--a8cde9a8-eae8-4a17-be21-400331ab56b4", "indicator--b7696d1a-3f88-42e6-b874-a1aa64fe7d31", "indicator--f2c13cb5-a3b5-45f9-99ff-6f67f6a38cf4", "indicator--66959b03-04a8-4cc7-884f-3eca4258305e", "indicator--7eb6c1c9-a860-4d41-bc02-1a63b7e8252c", "indicator--48ba9996-465d-44b0-ab8f-90498d3dadfa", "indicator--d79f9020-cdac-4c3a-aa31-4476a6874c82", "indicator--e5e4da29-514a-4c81-a140-da9a7f80173c", "indicator--3650cab4-66b1-46d3-9b75-74c33f0fa16e", "indicator--bf15bc08-e105-4681-bd02-251afc229ce6", "indicator--6b0cc7f5-122a-4239-9a4f-7105424119bd", "indicator--4eb46bfa-6837-4424-a86e-c619a203232a", "indicator--a0af0acc-1cb8-4d07-8f6c-5000cc3964a1", "indicator--260beee1-a3c9-46f8-9b25-004cb20c501c", "indicator--6dae1a0d-2886-4fb0-84ce-c668f49c70f3", "indicator--999e0bed-2ada-4594-96d2-a62cfc57c0de", "indicator--f4fcf902-1faf-45e6-97ad-07638aae6e09", "indicator--82154b96-0204-438c-9dc9-08524bf523c8", "indicator--4a725ec3-3e22-488a-9d76-369ab991703b", "indicator--126fa013-1957-4950-8a65-d796f5ee055d", "indicator--7767235b-3490-4200-aa25-016f1b5749e3", "indicator--d0dee1cc-b413-4293-89ab-ed5187ef969a", "indicator--332f9ece-74af-4099-bd32-d9f2f8589348", "indicator--b529a927-084f-43f3-8b2a-862f411d3c48", "indicator--64a51555-bba8-4a3f-ab41-5b6d1471bc5d", "indicator--c48ee1a0-fc79-49dc-abc1-c3a9db4b3658", "indicator--73990daf-89ff-45d2-ac66-9d55c91ce0ee", "indicator--eda11fda-0d55-4300-a9f6-ac765f1a6067", "indicator--bc67af5b-46a0-40c9-90b2-c829ee8944a3", "indicator--d301a62f-6495-4663-b6c9-d93f32f8132f", "indicator--7b4a376c-9b4d-4fcd-ad01-e92f912ce413", "indicator--eec21dd6-db20-47e9-ada8-b10476c9bfa4", "indicator--9e645ffd-4c7c-4265-92fe-3a051ddd2ee3", "indicator--76c6683f-3ef1-4d1f-9464-26cf8b0ecd61", "indicator--57c77243-788f-41e9-a5a8-367134dd3bb7", "indicator--15d2b4be-b90c-47f7-a04f-5db02b8be992", "indicator--2aa442bb-a03c-4b88-a4aa-08ad4bbdc123", "indicator--a01e54b1-9aa6-4dba-9f8b-f4820d6a8dc2", "indicator--ccc5e3a4-b102-4f5c-9a88-6e95a6d32f1b", "indicator--c2eda613-a162-4de6-af1a-7058a110ba69", "indicator--85a654e1-fb78-4d47-9394-40a63057bd38", "indicator--96724d45-b7cd-47ff-8982-7fa2a63d8072", "indicator--270b5d34-ecea-47e9-8a90-b7744b06ee49", "indicator--ac144826-bce4-4179-b0a4-16f4e2923b3f", "indicator--8cd07352-ab4d-450e-8c08-f85419e6d8db", "indicator--ecb29b36-a25b-4a21-a83c-6f309100c69e", "indicator--45b1ce4f-22f1-4d74-bd55-1c8728efe2dd", "indicator--ca033ab0-273e-4468-af7b-306d93e52d9b", "indicator--6007a7a6-59ee-41d9-886b-a510cb1b764c", "indicator--ba4cb804-c1cf-4ed6-92ce-d8277fdcbd7e", "indicator--420ce5a7-6bf1-4235-9924-472e9c83e26a", "indicator--f67d195f-e9e1-40a4-93ff-6c5fdf1e4a4d", "indicator--62fb9e60-c740-4735-97c5-eb054755f0dd", "indicator--812991ae-d035-4ed2-8fae-afe8d4c6b0ac", "indicator--0a1f3aaf-28e9-456a-ae4f-36773ec26272", "indicator--82d3c89a-e366-4007-950b-ed5a18fa34aa", "indicator--3a2da32c-e65b-48ba-bd0c-3fd318cb44e4", "indicator--be3f6d9f-37f0-495f-af47-bf7c373768c9", "indicator--a8ffa06a-a3ea-4f2a-93c4-0e321d5b248c", "indicator--3d3b3eb2-e56f-4152-8c8c-831213c43fb4", "indicator--da82e280-9837-4e04-b9b5-f7f30aa10272", "indicator--e8647ea1-2cb0-4b10-bb1d-75876a3f974c", "indicator--044c965d-42d1-4bd5-a2c8-dcfb54daa3e9", "indicator--91418afc-f1a8-4d66-98d6-e3c24ce68974", "indicator--c725e417-18e2-4d41-b023-c3472a42c856", "indicator--a9c5d608-ad38-44d7-b916-e8b0c89aa067", "indicator--51ef57b1-ed09-4c59-b172-2941bc8bca9f", "indicator--f60f40d9-b259-4ee2-a879-bd9696e7c3bb", "indicator--8415fedd-35cf-4a6a-80fe-3ab99fd074d9", "indicator--912ed173-d1b8-45c4-9dcb-bb4e4d2ec1ce", "indicator--0241a8ab-10af-4c59-b655-255c2fba5607", "indicator--32e94615-acb3-42bb-a3d4-1c2263f97b51", "indicator--e79b4d70-7a6a-4648-a06a-32be8c133e8c", "indicator--37d14af6-d32b-474f-850e-ee79346a4417", "indicator--503ce2f6-213f-4802-bc94-aaf4460de292", "indicator--c7a93857-256d-41b3-86fa-e442855c170b", "indicator--af2ca157-e716-4cec-8a62-00e4fd6c8d4f", "indicator--eb8e12a5-2cae-43dc-8737-33c075a48eea", "indicator--e07d6e57-cafd-413c-8995-3dca9b51e6ea", "indicator--91f66b5c-f6ba-4975-a373-58fa97588b5a", "indicator--234fdbc7-2125-4d01-ab1d-cb006ce3d845", "indicator--d14433f2-d600-45cd-af63-2f1303a591af", "indicator--d4533727-d5cc-44b6-897f-2c85b4a87e7c", "indicator--0870d2c7-94ee-40b9-9e6e-cbccb2ca3acf", "indicator--fe36f95f-da29-45c2-b054-9566d1842d89", "indicator--c198ca73-8212-4a22-8a2e-5aaa30cb2a50", "indicator--f4b75215-0c61-41a5-9121-8d667a74a6e5", "indicator--38dc8659-c93c-45ad-ada9-3bdced757fec", "indicator--7e31035a-7b1d-4153-b526-48d069cf93b6", "indicator--f6316211-c6e1-4d98-892c-88a816ab91c4", "indicator--5cf5bbf3-bbc9-4cd9-a9d6-6e52b703936b", "indicator--5321151b-c540-45c1-880d-73611aba634f", "indicator--aa5ab1b7-9d4c-4867-a67c-bc2c864f4eee", "indicator--5604b288-4177-4bd1-8416-b8405b2e1499", "indicator--40d0ee83-bf9a-4f85-8862-3f782cae607e", "indicator--ad057e3f-f4b9-4133-89b3-5af022b4f229", "indicator--7f6cc527-d253-4240-8b53-015a747f9937", "indicator--47e69fb8-f97d-4753-b62f-bcd8bf927c14", "indicator--4d02de3d-0113-46c6-91a2-b23a00595fa6", "indicator--5c2ffba7-638e-4120-bd1c-d4adeebed091", "indicator--ea9f32e5-0509-4d5b-95db-cce092cd6bcb", "indicator--d80e546d-2989-4fb9-8b3f-02ec747da8ba", "indicator--99ac93db-ce22-4131-a59b-be6e6441c6ca", "indicator--f57686e1-10db-4451-b835-559b3de341c2", "indicator--2cc3250a-d776-4fd4-9d43-8fa2f6d62a0b", "indicator--bf320367-a8a8-4c60-9f5a-d00ed3e3624d", "indicator--cf4a6ab3-8eb2-4e48-9a35-ee82becff9e2", "indicator--e8dc1bc1-4cfb-496c-bbed-8985760a25c4", "indicator--59e97e5d-6586-4636-a77a-a52a1b5f0c47", "indicator--5fc31271-b5a4-4341-b0a8-59c7da44c580", "indicator--6889e698-caa5-45ff-826f-e48b9c7f80fb", "indicator--caf061b3-5042-4308-9a1f-6e91012063bc", "indicator--29e7555b-6e46-4d13-bc7a-edebf756b134", "indicator--9527b8c6-5701-4dc4-a999-87c3bdebfbc5", "indicator--dcf54d27-6def-4575-97f5-19b11caa97f5", "indicator--82a73bf8-2ae2-41c6-8da2-eaf53bc78ab1", "indicator--cf722987-1eed-46eb-a8a3-631c3902931a", "indicator--85230fe6-9d00-4d52-aca6-fd3fbe6c47f4", "indicator--384f1a4d-7b7a-4469-a974-3846c687dd7e", "indicator--c0a2a437-16c1-4bbb-b1c4-e5249b9e5dcc", "indicator--b492a7e4-08ae-4617-83ca-688ccac15bbf", "indicator--425771ee-69d8-498a-8fbf-e718eea51e06", "indicator--e7e0a5e5-ea2b-4f1d-8320-b19d481a68c4", "indicator--e26d40ff-b465-49f2-87d2-cffc0868fb9c", "indicator--c661d5cb-a7ce-4ddc-a52e-352bf6880ea1", "indicator--f75408ff-bf81-4d20-95c0-724f40165d33", "indicator--9f6983d1-3439-4dae-9bd3-12d7b43dadbd", "indicator--262b6dd9-a800-452d-9f62-0db788596f63", "indicator--03ee1779-5b78-4b7d-bec2-d13200270210", "indicator--72f7788b-0821-4861-9372-7ba880c317cc", "indicator--ad9ec3ce-0419-4871-8056-c4992e0b5a9a", "indicator--e927564c-bba4-444d-806e-6b6cfe553b95", "indicator--b22b9b79-2e57-4cb5-8df7-b8bb3c19d108", "indicator--5495e16c-1621-4659-969a-2bcc41f34102", "indicator--4d9b82c8-f3d6-4085-a618-d3e96b1a5828", "indicator--91626e8b-7a37-420e-98d8-b33060b35a40", "indicator--028ed05f-33a7-4386-8bfa-0de1aa2afcda", "indicator--35cad0c5-4aa3-45a5-ba73-ec9fe9e9e862", "indicator--6b57b9c4-df64-4dac-ac64-a007e04becfb", "indicator--c50eb106-1f7c-424c-999b-8dd60a6e3b0d", "indicator--4cfa39de-16f5-45ed-b7c5-f10a18941560", "indicator--7bb6a446-8eac-4e55-afab-3af25a197ced", "indicator--152a6f02-1b26-4046-a1ab-bf39836f8170", "indicator--09423a5c-0907-444d-95c0-e2319cb7c27b", "indicator--a7c50926-fc0b-42b8-96a6-2f9836bfde61", "indicator--843c716b-2adf-48bb-a41a-63bc2503b0cc", "indicator--cba67f1f-a953-4c63-be33-05e54ad8e7b4", "indicator--f365109f-f1b1-432a-8977-59cf7d35dba5", "indicator--558d7578-ac1c-4ada-b9a3-a0f076e2aa6b", "indicator--784d3a6d-1ca2-4462-9cde-1120a6f40e6b", "indicator--dca36b9a-935b-4418-adc7-00fe6f91ed5c", "indicator--828db284-4942-49fa-8f11-1fc5bc453516", "indicator--caab34e6-6334-4004-8064-35f660fa9a33", "indicator--3e3335e7-d505-4f6e-b412-0e70c6071306", "indicator--72bb0341-fa0f-4a10-b372-428d211c4fd6", "indicator--cc9940db-63a4-4bc5-a633-e1158b01886e", "indicator--88a2be26-1c4b-4d1d-8482-cd54563f1b50", "indicator--67896a09-1821-4370-aa28-6d5fccd64f27", "indicator--d4a5152b-4e17-4d6a-85b8-a541e2fafc87", "indicator--69e747d4-470d-4451-b163-7b01563fea28", "indicator--5e738988-7013-4043-970f-72f287a1bf2f", "indicator--49ff1a02-05b1-4ab3-a66f-b4d6e883adf9", "indicator--63b53cab-a720-4488-bd07-6fae9e50f995", "indicator--87c2f569-efdb-4194-91a7-8a7c6c30cbf9", "indicator--d3d7cbb3-e055-4e7a-bf87-18623ce25230", "indicator--fd160358-2f11-40e5-aaa4-410dbe392d28", "indicator--d617722b-19e6-445f-9bba-b6b99bf9c243", "indicator--92dc6bf0-a214-4d8f-b694-c9f766565ba4", "indicator--36c089e2-2571-4c10-a822-a08463e53b16", "indicator--6cd361a4-db76-43f7-8b39-9a17866b1d3c", "indicator--ba9bcd50-14ae-4096-bd04-b54837bf7abb", "indicator--ae5c9996-cb18-4a84-ac40-c7195878f00e", "indicator--ffcb8988-9a35-439c-9d4b-92715f2a2c72", "indicator--8bc3513d-4d7c-4533-8fc4-6c6ffabff8f4", "indicator--85156c29-ec35-4b9b-8c01-6e872fe16e83", "indicator--ccb4da88-9fc5-4fb1-a56d-894d2724a0d7", "indicator--a0859f9e-5da4-4bce-a722-f284abdf6a67", "indicator--fe8d4f51-aecd-401d-91d0-392ebfecc733", "indicator--0abf3446-76a9-43e0-a3ef-583a6aa781ee", "indicator--6cf21a86-2b5f-4a74-9262-3a4fe0facad5", "indicator--9f2c1656-bad1-43a4-a23e-79e0db3f0f32", "indicator--30000add-0dbd-4f7d-9417-562ad7e95358", "indicator--144ed5bd-c7f5-44fb-a33d-f69c66b11bd5", "indicator--ce154833-17bc-44e1-b056-4e06e60f9140", "indicator--2b4f4a39-96f9-4fed-ac8d-b2a993ff1d04", "indicator--288724c6-5338-4c02-bc27-72f62a789c82", "indicator--1d264231-3d3a-4675-bb02-98da29b748f0", "indicator--ecb1fdab-892a-4eb1-b453-2e61fa42015c", "indicator--292aeac1-509d-4277-9a77-24f19e555d52", "indicator--da9ef4d0-2a25-4330-8a53-2194ffb8d337", "indicator--de2e948b-5c86-4860-9d84-d23682fc421e", "indicator--4c81c82d-1679-4c2e-ae1c-b0269f1b9301", "indicator--b1685fd2-3e0c-4a4f-b938-d72546ba3778", "indicator--99369003-4c9b-41ea-b355-4d3ae65db047", "indicator--f1c34a97-358e-483d-ba91-1ef96e1a2b2e", "indicator--1c7bab26-71ff-4425-8607-755bdc8dcba1", "indicator--94f451db-0f79-4dc1-962c-73222f45b2c9", "indicator--a5a6ec0e-c45b-4d0a-9224-95526e65f203", "indicator--76794718-d2c5-4ed6-942f-666f2ec6402e", "indicator--8099c76d-d39f-4d0d-bc81-4a288076467b", "indicator--e85eb8d4-c623-4093-a8b7-f6aecbd6026b", "indicator--ecb5c785-60a6-455e-97cd-eab02696fe02", "indicator--c534c4c2-0b46-4876-8b82-0fc1336a4162", "indicator--3944aa4b-fb4e-4e1a-918b-8bdd95d4d032", "indicator--52c1dfda-08be-401b-b2dd-36fc3e508c5b", "indicator--f9a4d411-d65b-4fb8-9408-2216dbd9adb9", "indicator--6f8be673-2f5b-4e3f-8fd6-520c71a3e696", "indicator--a8263cfa-7492-43ba-9f9c-becab93614bc", "indicator--fc4199e2-6cf7-4fad-9e39-0b6185cf5936", "indicator--90a1ac2e-4c54-4079-901e-22809b6ad4d4", "indicator--3484d113-104c-47a4-b513-fa3a231f8dc8", "indicator--ab217ca7-9f13-4591-bd37-5af3e7424d58", "indicator--035bfc9a-f261-40f8-a581-59f790474425", "indicator--f539a99d-7aa7-40e0-8504-b6667932ab89", "indicator--4d84eac6-3cdd-42ca-bf71-a7b60b976382", "indicator--4c1281ad-32c7-4024-824e-dc80eb889626", "indicator--896b33f0-97bd-4705-9b8b-584e76fc31c3", "indicator--d5a74e94-8721-46cc-8321-7c88527bba9b", "indicator--8fbfd083-86ea-4d35-ac10-41b94eb980b9", "indicator--7bee2d39-1d6a-4ea7-ac9a-ee865c8bec91", "indicator--ac30cd58-eb41-4fcb-91ab-09ff47c90522", "indicator--0a5560f8-5ac1-4c4d-84ba-37b4c020fdf1", "indicator--e6c67451-91b6-4f08-8e0e-50e413a9cecb", "indicator--a16a5788-494a-41f7-abdb-6218dda4521b", "indicator--397c4055-23e2-4352-80f7-fd251b6ab8ff", "indicator--bf9407ba-58c6-4262-8cae-75dabea3df2a", "indicator--8a5839a8-d839-44a6-adbc-f26d66f05988", "indicator--a7fdced4-a8c6-4b05-be57-73306e8960d2", "indicator--e275ebf5-c24f-4058-aa42-e448de7b2e30", "indicator--a8ca1fbf-e3a9-4e8f-864a-db3b1cc464b1", "indicator--2d7eaa70-ca57-44d8-a194-8e8647a5d905", "indicator--0f702b16-d093-4217-ab3a-ce8878ffe1e6", "indicator--f72db346-ef2e-4a78-8560-b961312a4550", "indicator--0af642b1-5b6f-43c4-9105-fe86773d255c", "indicator--b66e6a16-d8d4-414c-8d92-8e0b92ba6f2a", "indicator--1583ba79-f8d8-4a16-a5cf-23079e6d75b2", "indicator--25db6009-1dca-4ff4-9439-60d7a1a60c98", "indicator--6185c5dc-a961-481c-83ce-1810bb138ee2", "indicator--8d022257-6ad9-488c-8477-b264565bec79", "indicator--eb500e25-76b6-4290-bf06-7a84ff11427a", "indicator--5280f25c-07db-40af-b706-bf83e1ec149b", "indicator--d2c5f446-8484-4c49-91dd-481cd8a03ca2", "indicator--499b690a-56c3-401f-a052-1b83a1d5cc03", "indicator--f513dc77-2a1b-459e-bc6a-2bad0ba84f8c", "indicator--422b2e0a-4475-413a-872a-2487b7d5a4be", "indicator--f47141db-f565-467f-a939-66989d6d0c99", "indicator--35e0e694-fe23-40e3-993b-a28989358393", "indicator--fc56b78c-354b-4f5b-ab19-16b8ceb02e4d", "indicator--beae6f91-cd46-49c7-b3b1-e01180388f1b", "indicator--3a5b6d95-7b72-4e19-bc25-f9b97d3cb0c5", "indicator--12386ac9-f63a-4fcc-8428-0c1fc89eabf1", "indicator--7d6e7e66-20a1-44fe-be6d-583379c8f345", "indicator--17f46983-c7b1-4493-8107-b7d111d1027b", "indicator--b708089c-0d36-47d5-ae64-b1c12e7dc6d4", "indicator--b13d721d-445a-4f8f-80aa-1d557af96679", "indicator--b44393f4-a5f5-4591-9daf-5dfac04f3f83", "indicator--5c84b2d8-5327-44b3-85b7-f9d9ed4c65b1", "indicator--ea8ba1e2-0d84-4e13-8dc3-3966f8d879d6", "indicator--6df04c16-dd8c-4df4-8f68-adcfc6ae04ac", "indicator--ba3dcfe6-12d7-4806-b1de-6318d9364f7a", "indicator--f582c224-a8c6-4a34-92f5-7c9b70b43073", "indicator--48d01e80-5fc0-4dae-b572-c25899f539c2", "indicator--bef560ed-e4fc-440c-a9d4-754559482165", "indicator--26d0a176-7002-4c89-b5d6-069e8212dbd9", "indicator--5f51b9a9-bdb0-402c-8794-f680f3c43502", "indicator--9dd1e0e8-f94a-4d7b-928d-ca880a77b979", "indicator--4f73b1d8-9e5c-4ae0-a034-428a46d9305a", "indicator--935100e2-f2c2-425b-84eb-e528ed743922", "indicator--c2d7a413-af60-478c-ae33-3f8dbc580055", "indicator--6e870c4e-9902-4f50-8b93-fdd10a3168cf", "indicator--af11dd35-ae13-4058-b7cc-3df88ad9a984", "indicator--70ee5755-9996-4a82-a117-ef735177f5b8", "indicator--fdf522ff-ef68-404c-81cf-b1e33cfb2bf1", "indicator--8c369fbd-23e1-4ebe-9acc-2b75f6265b54", "indicator--a84237b6-dacc-445c-9518-c479ee16e4f4", "indicator--20f6851a-3a70-41fa-b082-697ebd75484a", "indicator--aed8f344-61ff-473e-94c8-fedf01f29056", "indicator--f3c801bc-afff-461a-86f3-bd060531dd96", "indicator--78ddc187-6c8a-40eb-bd72-bcb82201994b", "indicator--6409a819-b9aa-491f-aceb-0dd77d9c38a5", "indicator--131d16e1-210d-4f11-9f1e-504c72ef46cc", "indicator--5ff8eaa5-e8d9-4d3b-90cc-a489583b3cbd", "indicator--627a9070-7078-4701-afb3-5b04c2536c7c", "indicator--3b2958f9-d114-448a-a9b4-cb337ac9d4de", "indicator--8238eed2-fea3-455a-97bd-e44504b556b8", "indicator--f8f3e507-d8d8-47b3-83d0-b160a7b1b096", "indicator--7d5322ef-f131-4898-899d-ef399cc5e442", "indicator--6106d902-9c16-4ee2-ad8c-cc28f3e54265", "indicator--3303d2e2-a08e-48dd-9a1b-70ba3b0bbed4", "indicator--51f4f4cb-2449-4d04-bf94-5267d1a75d75", "indicator--00aa3113-b301-48fb-aa59-611891fde18c", "indicator--a9e530c6-b807-45e0-9ec0-3374eb40d4f3", "indicator--bcb6b3d3-92d7-4849-897a-731b89a62b08", "indicator--4110c585-bb4d-4dfd-8ee3-a6696b20a5e2", "indicator--5b1c82a0-9c25-418e-b201-806fd05eee2e", "indicator--ee0dff45-ecdb-44be-acb5-2f56c37db536", "indicator--5ccb920f-6d6a-4e12-a356-925e71faff34", "indicator--a72b8899-131b-4613-8b87-c788c1986d0d", "indicator--e4a9dd84-bd04-4e61-9f1c-c4618ea4fbc5", "indicator--772cfdf5-3264-4ca9-99c4-66657e1fbd10", "indicator--3db08203-64ef-4238-b3cd-3620dd162789", "indicator--a47454a9-e121-43f8-b6c9-9d4c046b980d", "indicator--588d4ee9-3ce3-441b-883c-7c9a9578f6b6", "indicator--7e352a1f-42ce-4d86-bbde-812cb1411efe", "indicator--90b4d2f7-23bc-4094-89e1-b2d56119aca5", "indicator--43025d43-3ed8-44f7-bc6b-b8865f87c391", "indicator--42b1cd25-4f5a-4d3e-a732-976bd97adba5", "indicator--a3318170-34ff-405c-8aca-46b0eb0a2b9a", "indicator--975db12e-ebbd-41f4-93fc-15b5ff3325ac", "indicator--06336f29-dbc4-461b-abc6-66829a2d25a6", "indicator--ab2aba86-c19d-4200-b873-2c4333e4404f", "indicator--809622b9-3d61-427d-8d3d-e473e58dd51f", "indicator--6265843d-6bfb-4f1e-84e1-b7dab015fafd", "indicator--572e5a1f-61a0-409a-9bb3-22bf57a4adc4", "indicator--f7d69823-e399-4db4-a299-fcc4f4b87de7", "indicator--4e49cd4b-b75c-499b-b68e-000aa738afd3", "indicator--8f6befc1-784a-4553-b5c8-e26662f10cdf", "indicator--18eb1d78-4a39-43be-a942-f4994414a5ee", "indicator--d7062105-5bb9-49b5-b041-a4755ec36132", "indicator--7364eb76-ffd9-476d-92c9-d2cde4bc4ecb", "indicator--b291f5a0-37f8-460e-8576-d62fedc56d2a", "indicator--08579d2c-9c93-4428-97a8-3e21a8c35dea", "indicator--3b1816bb-c789-40e8-8f30-909f14dd933a", "indicator--53bab8ac-e21f-4aa0-85e6-290598e7aa0e", "indicator--0700dde2-4da9-4fce-a2c2-ec325203338f", "indicator--78b3ec58-f645-4485-af15-7bb80acee89a", "indicator--1ebf5ded-0534-451e-9fd3-89432e69c1bf", "indicator--6e54c2e8-f274-462c-b8f7-763bdd58ad96", "indicator--7f253083-1454-4802-b30c-9e1dd346cccc", "indicator--f3f058ce-2111-43bf-b054-ca415be33ce8", "indicator--ac67e0f1-7945-4051-9f6b-39eb61602e6b", "indicator--2c180be4-fab0-4980-8bce-7f8d059bdaf7", "indicator--f2578381-04a2-4b92-aa8b-08ff722b931a", "indicator--daa295ca-ceea-4611-a818-65f97b48fe94", "indicator--963c7231-637b-4d35-a23a-9b498e1fe045", "indicator--ec66e412-ecd5-4614-b153-619577c24392", "indicator--e2ae7d73-caed-4bc5-93d5-19f3476e2bd5", "indicator--483f75a0-29dc-4f91-9094-cdd807daab3c", "indicator--fb428266-7ea4-4ea7-b348-1714e1b225ae", "indicator--1566b18c-b3a7-49f3-929f-e5ba2aa15866", "indicator--291dd775-75a5-4b1b-aa06-6ab9d82b349b", "indicator--b00d3c9e-0b1b-4b75-84d3-3c1fce211c23", "indicator--4b1a5fc4-fa75-490e-b533-ecc6dd8f3d2e", "indicator--dd8c17f9-30f9-4e25-8cbf-8bd1ebe75db3", "indicator--875c537a-55e7-4711-baf5-35045950a65e", "indicator--a808a615-e1cd-4288-b7ef-10c9489e1494", "indicator--4c36013a-f22a-48f8-b852-99b462725e1b", "indicator--ce8010b3-4600-417e-acd7-ba8354e7b562", "indicator--a9ed9c45-394d-4033-824a-43562dd1246d", "indicator--1f29c53f-d751-4f01-b0f1-32006809493d", "indicator--5fb8f8a7-2012-41da-812c-1491bb230d86", "indicator--35b294e2-6028-4605-9143-c6a7480d1da0", "indicator--5d3252c7-c4d3-4621-9042-5d6153db96fe", "indicator--e9d0a387-81d9-4ff6-9b8d-5e52f15a4956", "indicator--75faab4d-b740-404d-9d0d-f3b9b8a7a903", "indicator--6cfb67d0-bcb8-4057-9686-9fedd3dfc39f", "indicator--18614216-4348-48eb-9279-c10772b0cf38", "indicator--c5726244-260a-4770-bd72-5d6b647f1f6b", "indicator--a3bbaaed-cce7-4c11-9633-387feb64f277", "indicator--b3c845b9-3160-4ee5-9627-d66d046a02e8", "indicator--8c190f39-ef65-49a8-a0d5-f77760eae3f3", "indicator--b41ec315-9792-452b-b32e-514bd016e8b7", "indicator--dc944fc8-4930-476c-8b7d-44ac403446c8", "indicator--db3a7e15-6d20-4fd7-aba7-0085ed1105de", "indicator--99ff8c27-e7f6-4cf4-a9de-680918112fe1", "indicator--1a175c0b-e10a-4b79-9cf9-86ad399a65f1", "indicator--adb7746d-3754-4ab2-92d0-3c66e4b516d2", "indicator--aa98afc5-a13f-49ce-afe5-37399e319d60", "indicator--bc0fc8db-20f6-4024-9b37-f24ff6255c9f", "indicator--f4bda890-976b-4a8a-ba06-c11b63a2f72b", "indicator--2d612500-b02f-439d-b630-0583c7974ea1", "indicator--a308a218-a627-451a-8e5e-e9a7046e0ae8", "indicator--46675da0-1823-4108-8ec8-00aff6fc050b", "indicator--ef18a737-d54f-40c4-9da9-45df60fb7ccf", "indicator--319e4000-130a-466e-92fa-aa61d07d76e0", "indicator--dea8ca57-8e45-4cf6-aec0-46a9ebd3d2b2", "indicator--9d61f895-0ceb-49c2-9a31-50af42fd1cd4", "indicator--114143da-d3c7-4920-9aae-35d392ccbb0b", "indicator--75da2650-0d5b-439c-81b0-c426e599d107", "indicator--9b925afe-f14f-45bd-b4c8-9e02b5d1f0bd", "indicator--87057d71-9f6e-4cbb-8291-3192ab437f06", "indicator--0253b454-64d1-4060-b12f-e1717bfeea06", "indicator--69bef0c7-bc15-4d99-ae7c-0c802987bfdc", "indicator--3eae3ebf-c0c3-4090-8eea-8bcc034d84d9", "indicator--cb96a9f2-e56f-481d-8dde-bae01b2fd1dd", "indicator--2321847e-a829-4c92-8099-5579dd856ec4", "indicator--59e7e185-a1a0-4a06-b8c5-3975cfd48e48", "indicator--181f2c8d-e6da-4fd9-bf3b-905cba0e553c", "indicator--84035816-1be8-4f01-b5cb-d71267fc424d", "indicator--c0aebb6a-b78e-4121-b3b7-15ca05d7ef8e", "indicator--85330647-9a56-4605-b6f5-cdb8703a4692", "indicator--ee570299-a7c9-4eb9-8286-9f5fa775fef8", "indicator--c546f7e4-2e46-4e8f-aef5-99f42b1af4e1", "indicator--49711909-f7b8-458e-82a6-082c768f0fc4", "indicator--aa854f44-225a-491f-ad56-8a55ecccc39f", "indicator--e5649257-a4ac-47b7-9cf1-53803e9285ea", "indicator--c4ba8cd3-e98e-4758-a1f4-850bcc448e84", "indicator--981f8bd4-22c2-4820-bdb0-3bbff8daaf6b", "indicator--a8c6352f-936f-4fb3-822b-70698db27b67", "indicator--9149a8d7-d1c3-417e-abad-dc00d2029105", "indicator--e1af5da9-47a6-43f7-8532-f9c8b71ee11d", "indicator--aee990f4-15a0-4760-88c7-1389e3952448", "indicator--11b56cb2-ac19-43cf-84a4-794adb372478", "indicator--ddc39188-bb6d-45a3-9dd1-02800aaefa4f", "indicator--0eb88795-657f-49c1-90ee-8a7636b0cd59", "indicator--435b5d03-3f71-4f45-9e9a-463e03930e18", "indicator--2917f0b6-a959-4fca-8dc8-1ed42d4e5139", "indicator--c0d2a180-796e-4cbf-bbc5-5ba8a8e82d35", "indicator--657564a7-a4aa-403c-bc18-65cab030c873", "indicator--f9962def-534f-4e4c-a77d-f661900b93eb", "indicator--083e02a7-107b-4532-b25f-d43fde0957fd", "indicator--04471b55-e2c3-4956-8f34-46d67c2cff4b", "indicator--bbd53545-c2a0-4e82-8b63-b2d5a6d80f5d", "indicator--a6593176-72e6-4213-9186-6ae545f9ccd0", "indicator--d54a258b-4291-4a40-af98-d2b5665ddaaa", "indicator--ac384196-f08f-4ade-9f1e-3ca6fc6b9a75", "indicator--9f1c2154-0300-4c26-ac54-0828a9c91ac0", "indicator--a86a6252-4f96-4758-8fb6-cb9993330e59", "indicator--cbfd1e1c-b503-45ce-a5bf-bdd3b582e637", "indicator--0e39ee70-523a-49c2-ac97-78a9762ec0ec", "indicator--92beebb0-3a47-4be2-9b64-a19766744c31", "indicator--733162b7-1776-4829-bddc-5eca30355904", "indicator--4c2ffd6e-debd-4882-9f66-8d57a5d55675", "indicator--350a339f-7e11-4bb4-be02-df40249556d1", "indicator--d2a6f7fa-38b8-4479-bccc-de0ea32b783e", "indicator--91b46832-541c-4d6d-bc13-ff63274c2940", "indicator--5d26223f-575c-4faa-b6ee-5aef9988aaa2", "indicator--122d130a-428f-4a46-913c-3e61e7645dce", "indicator--76d451ba-4630-4230-a9bb-82241b2b7383", "indicator--7e5fa9bf-b861-4155-8c1d-550ba97d9f18", "indicator--5cce84c0-3557-480b-bdc8-700cbba60a9e", "indicator--f5f26dfc-723f-45de-89a7-93190f062618", "indicator--6772c5c7-6c0b-4fb9-898c-9ef373fc4c7a", "indicator--32abf4c0-b1cf-4e3c-990b-4e798336c26a", "indicator--9405ded8-beff-4d78-b3da-7b41a7a853cc", "indicator--1e4d35d4-6007-4719-998a-c5f650107ff2", "indicator--28301fb3-d6e8-442e-a736-50c63b1abf57", "indicator--6cb186a9-3baa-4211-98fa-3d2b0ddcbc74", "indicator--5f44a4c8-3707-4420-81f9-26a8a6c79aad", "indicator--0e82a04a-4ba6-43cb-9b0c-a6207609a722", "indicator--ab17ca76-c206-4719-b020-fcc3b4676495", "indicator--7c915d9b-0253-4bb1-ad18-d07df8c17bbb", "indicator--902df9c7-c87e-4038-b9c5-7c55039f3035", "indicator--f4a5c7ca-ef3e-4ba6-b262-11b7a678c4ab", "indicator--918de84c-e94a-4896-b230-5fdf26796921", "indicator--a134ad21-8d4e-41a1-be2a-10eaae0821ba", "indicator--056e23e5-72f0-468b-b574-bc8835328cba", "indicator--1a7eff9c-a7ed-461a-8a30-8781ce133b7d", "indicator--88006884-ea1c-4318-bd91-49a5aa86b3f5", "indicator--51777b00-f100-4ef8-80e4-64433ed14df4", "indicator--385d86be-dee3-4f4e-834c-32ab0d010c87", "indicator--3a621133-aa3c-4cbb-bb4a-03de13ba1979", "indicator--7a5fc29e-95a9-48b6-9f05-f35089db4520", "indicator--d7ef8644-9877-4476-9440-020c3ce181b2", "indicator--0832ea8c-a9f0-49ae-80e7-35bed9148999", "indicator--243785b9-6cb9-425f-b1ea-08cd7795a135", "indicator--1d3bd39a-154a-4240-bf40-3b3b836cd722", "indicator--f6c33c62-bd32-4237-8974-6cff0e18b734", "indicator--9a679f04-df60-4281-be9a-1b446ff3f3a5", "indicator--8474634f-6b93-4718-993c-e72eb495e8ba", "indicator--4b0cd715-e802-4a6d-9af0-128f09bea3c4", "indicator--2565fd84-446a-4961-b98d-bca71a1a84e1", "indicator--7a255872-1a9c-4b60-b4cf-b16c3e07785d", "indicator--f7158e38-87fa-4a13-8f5e-feb46eb5e3f5", "indicator--1a8afe7a-8cdb-4e86-b44a-671029cbc72a", "indicator--8beb202a-6f35-415b-9023-6122c0da2743", "indicator--413c3a70-fb69-4965-9e56-d737ac195a2b", "indicator--3820d765-3c63-42ff-8c22-43702a42fcb0", "indicator--9d1320c5-6aef-4bff-bfdd-4c9fb92b77b8", "indicator--7212b29a-ff87-4411-b0d3-638c5076aec0", "indicator--1ea6f33b-d1f9-4376-855d-7c5ec4c5200b", "indicator--5e803f56-459d-4926-b062-f5cfbac9fbbd", "indicator--def783b7-ec6d-4121-ba24-4cc51b9adf99", "indicator--cf854abc-5ff8-4a0a-928f-3ff9649fb1eb", "indicator--50a1ef74-5f63-47c7-8cf1-8c28b3339fce", "indicator--12dc9477-261a-4206-8b4d-5e9f012c0c90", "indicator--166ee7af-b8fa-43a0-9fb6-99b2b51de23b", "indicator--aac35058-de69-4ef8-a896-bd782d0bd5e3", "indicator--3fc531b6-a2be-467c-96fd-b3b0feb1e28e", "indicator--8a77dc1d-6e73-453f-a3bc-9fa90364d58a", "indicator--ff50fbc6-48a2-49dc-a0a7-d3692a98f0e4", "indicator--14d9c724-14ac-4a0d-9978-a6187f6dc353", "indicator--d2d45d2b-53ae-485e-b768-6fc7dfd3ac79", "indicator--a5b633a1-3ec1-4622-b0e9-bd30e562b32e", "indicator--3136d7df-8fe5-4275-803a-8f9d7562675d", "indicator--9b5ff385-d8bb-4945-a750-7ce3bad14f5e", "indicator--37dfd2e9-41c2-4bc2-be9f-fc59af858ac2", "indicator--0b0c5e3e-80fa-4d99-b115-33cc638d811d", "indicator--4c74b1c4-1793-460b-b705-1209a6d341f1", "indicator--a78ad819-82ee-4d19-acfe-82184251d2f6", "indicator--6215fd54-73ac-4d9f-a844-e3435201831d", "indicator--34c85894-4aae-4ecf-80d7-24e46b18eea1", "indicator--b1b648b4-2a17-45b6-bffc-b61c6ca4f299", "indicator--3ca5f71b-77ca-43d5-b6c7-263d23da72f4", "indicator--ba9df2eb-a30a-4e1d-af06-be3564bc9646", "indicator--2c2f2af6-4e80-43f5-9a3f-0b129b251179", "indicator--ce47f2cc-127f-46c0-bf1a-97eb8a0aa6b1", "indicator--2581ae56-2434-4f86-a8c8-655d048057ee", "indicator--508b8b3c-48cf-4a04-aa55-1d4f2f91b9cd", "indicator--b2c568ed-06f0-447f-8677-2ac4c83b1245", "indicator--0d6b7a08-5561-4510-a0b4-9c58eaee860c", "indicator--417bb7ed-b2b7-4fbc-91a3-8525073e0d7a", "indicator--2c6e756a-e4b2-45ac-bf51-13840f80ff3a", "indicator--05b5bdf6-bfd4-4b98-bde4-ac7f82424693", "indicator--a0367d84-ae22-4bf4-9d17-041d3bd4cf75", "indicator--a08afe09-5b56-4e0b-bb2e-bf520c872c9b", "indicator--0659a82c-da55-40a8-8420-d16f5baea7a3", "indicator--1611fc56-b276-43f6-9021-863e000b1173", "indicator--0e84b6d5-0234-4cdb-95cc-323c35c58fa9", "indicator--f1318464-870b-411c-a4c5-f598be68cdbd", "indicator--419bc7b6-4e7b-423a-91a1-1f915a8eb0e0", "indicator--22ed332c-bbc9-4956-8c89-9fdcfe3f0478", "indicator--ba375281-39a0-414c-ac31-3187e0ecd586", "indicator--92a7dcbc-f0e3-4c5f-861c-0570befe3513", "indicator--84f3d301-07a5-421b-9900-e01083f3cc3d", "indicator--65d67cc4-f154-4d74-9ddc-ef4770cd98f0", "indicator--2451c015-3b92-41ef-8075-2ba5c102ff69", "indicator--94358b7f-f362-42ad-9881-b37cfca5caf2", "indicator--7e25ddc9-9c9d-473c-a4a4-776d4bfa8a91", "indicator--b5fbe835-3172-43e7-8254-404e016c8efa", "indicator--3f452a5b-e3d0-4ad6-a10b-6f339e2a2454", "indicator--1386754d-8433-4092-a5c5-d5467a181ab6", "indicator--1b28fe11-f389-409d-b35d-92579a6b38c7", "indicator--852c38cf-08af-40d3-bf61-7fd12797c30d", "indicator--a4572e24-5219-41c7-a092-69fce435984e", "indicator--fa8e9618-8480-4779-813d-8541b804db43", "indicator--2ab48c60-e91b-4f1f-b568-c45d29ee7ccd", "indicator--930fbb9a-fb9f-47a2-b36b-5522f5970564", "indicator--3a522f9a-137f-47c5-b164-917380e286d8", "indicator--935f20d6-c6d9-4af9-a346-bb43c83ff99b", "indicator--5c732244-5365-44df-99d3-2765d799f8d5", "indicator--d81d0820-2b68-4cc0-87c3-d5b8335b202b", "indicator--34db55c1-e718-4d6a-b310-3d543f627f5f", "indicator--2e1c8880-ee7d-4ad9-98b7-2cd7e88a3016", "indicator--6d5cfad1-c6d6-427a-b655-4c60096247ee", "indicator--8846ec82-d3fb-4406-9974-0ec436271671", "indicator--eae34acf-01dd-4b35-acfb-06164b3e9f3f", "indicator--97c4b7a3-1f17-43e7-a4a9-f996dfbefc90", "indicator--adc1c96a-53f8-4c54-aceb-cbaba10cfc9c", "indicator--79cb0ada-4d3c-4327-8cd6-1508e2dd986c", "indicator--fb734f2d-4e25-4224-9464-abb2c43d67c7", "indicator--2e6623a8-962a-4621-b103-c0d23f4c3e33", "indicator--1b2d4f10-88b0-4f91-a55a-36ce2c9f2eaa", "indicator--c00da898-3aa0-4e63-ad5f-d09ee1161879", "indicator--224966a3-e452-4bbc-b4a0-34d1137279db", "indicator--e6fc1e5b-e839-4803-a42c-6df4bf11e6b9", "indicator--d1660fe2-eb29-4f30-b134-73640127b0c3", "indicator--2b419ca6-185f-4a6f-a61e-c03a15266f5d", "indicator--ccc605ee-7551-4530-88cd-224d0418d470", "indicator--fe48850f-9f3d-43a3-835f-190a90d5694a", "indicator--502003d1-87c8-4f2c-97ea-79cb05288add", "indicator--a80eea36-8b3a-40aa-9b21-2c90543fef45", "indicator--3a945d60-c9d3-4716-89f3-41b9553de859", "indicator--6df8ad7e-5fd7-4565-9d65-40daab2206d3", "indicator--28faa4f8-af98-434f-b182-c364a0674e2b", "indicator--012cb79d-e2db-4c2e-bed8-1510f358d5a2", "indicator--b18c5114-af35-4541-9db2-3a0a0d25ea65", "indicator--e3fe41a0-38a3-4057-baa0-f724af3c1074", "indicator--44395af6-c04d-4efe-a954-5eff251b0db5", "indicator--f1a3b577-f6b2-4940-aabf-44149be3c3d3", "indicator--99343977-9cd1-48c7-b40e-777f5ba6989b", "indicator--650a8e5d-b35d-49c4-9675-727973ccc143", "indicator--5755a211-e195-476e-a0b1-28f7448c0fe9", "indicator--d3562140-eb0f-44b7-a504-fdd7c178e25e", "indicator--9264ddc2-226a-481f-893d-48863c6195d2", "indicator--86cf0a49-8f1d-4b4b-b4f8-6fe501c59325", "indicator--9c8e5c1a-e00e-4dc4-a545-e0115531cb57", "indicator--d909d43b-26b8-40e7-94c4-151cb4611fb6", "indicator--aab418ae-c68c-4f5b-b385-3dff98166052", "indicator--fc819a47-a5fd-45f6-9122-7f3a2f6befd9", "indicator--a3f11620-6f3a-464e-8f32-510f6db33731", "indicator--b543cced-b9b0-4043-b89b-16aa406b739a", "indicator--1df2e5db-8a2d-43b9-af2c-a5237991aa36", "indicator--c228b72e-5bde-446a-af24-d702d57448d3", "indicator--31ba9549-71de-42af-8179-ba804bc1dda3", "indicator--d6bcb420-d058-4921-b307-11f36731a708", "indicator--f08eb4b7-13aa-4e2e-a88a-dfadd14b37a0", "indicator--602b5a96-28a6-43a7-8ab4-4db6c17d8638", "indicator--3d4d10cc-303d-4312-985b-72a323ec41f2", "indicator--025eb7ff-4711-458d-8bf7-f947ea47e935", "indicator--580362ca-4f01-4349-9203-1f4c4eacfd5f", "indicator--deb5d082-6fb1-4677-b8ba-303a01fdad33", "indicator--2615a7a8-b967-4a93-8d50-c147bea571f9", "indicator--9ecf6285-c70e-4961-98e3-4aed02954076", "indicator--683dcadd-6000-4ccf-9bdc-54733ea71362", "indicator--d0ba6591-597c-4a9c-a0e7-c4d3fbe51a1f", "indicator--f5d08882-8e5c-4d68-84dc-0ace68db7f9c", "indicator--19b250ac-ca16-4afc-b9d3-7c57a171e02a", "indicator--710529c7-9d2a-4433-8869-1845a23a3652", "indicator--7b28442c-2626-46ce-b7ce-346d5ee4bf6d", "indicator--b32489db-4947-4dd4-8322-2cf364f03cb5", "indicator--6b57474f-ab2b-47cd-877f-5d146c27089d", "indicator--f1859391-16bf-45ed-b3d5-65cb50196dd4", "indicator--563459eb-056d-48cf-81f4-fa35e9803b04", "indicator--7d97e8de-9a1a-485d-a11a-c8d565601eea", "indicator--7b3dd703-1048-4dcb-81b3-7fb9c0e91457", "indicator--9d2f282b-e2fd-4717-8d63-e6f3d908b5a0", "indicator--51d33929-7966-4fb6-90ad-13f38e5ab974", "indicator--47a5bda1-3a7e-45c6-8072-ed85c39ba357", "indicator--38e3efb3-6465-4611-ad9d-73cf57156f62", "indicator--35cdf851-3b78-428a-98e0-d22c46959bef", "indicator--7c9569fa-21f1-4832-bb93-1a7761ee6d85", "indicator--d7f51c50-f7d2-44d6-a07f-9a74c9c88506", "indicator--f33facbe-fe5a-4615-9c75-2fa8bd859f6c", "indicator--7d7b0f1a-0b97-4542-a8e7-3fdb55ab737d", "indicator--755d9916-4eb8-434e-b4e4-5ef677ced619", "indicator--5fbf533e-04a8-4cb9-af10-6e9865287120", "indicator--8693578f-95d5-4b0c-981f-d9bc8cd366a7", "indicator--2e05c044-5e63-457c-ade0-387ecb4c9f11", "indicator--8e7ebb51-9b76-45c6-8bc2-8357d0172bd7", "indicator--e7661477-cf57-4bcd-aa8a-5b92d0da564c", "indicator--9805c7cb-e887-4b4a-8988-5ebeaa88f276", "indicator--9abc32eb-8bfd-45c3-9d23-f867ff07f4b2", "indicator--70aa5eeb-583e-4c9d-b84d-99154ae222ea", "indicator--f91f157d-ba5c-46a9-b9ba-c415c25ef28e", "indicator--5a3beaba-ab05-4a85-bdd8-b980bc7fc477", "indicator--55217bcd-6236-4636-bb10-a91a7e1e7fe9", "indicator--c731038f-3b8b-4470-b996-9ff5f94e1dce", "indicator--48e15733-ac4c-46e4-8efd-4804000b40a3", "indicator--6a7f17c1-27a6-4ac4-82d0-d14cdfe48f6c", "indicator--86884fbb-ba88-4880-94c6-2a4e7efd9a57", "indicator--9d094f61-4128-4950-8be5-7cce66c2bd8a", "indicator--d891a72e-a920-49a7-b095-d251d4f13d58", "indicator--2a03e6a9-9f1a-42a6-bebb-4b437da9d3a7", "indicator--d3eb4738-e769-4fc6-9f41-ee9e7fbb465a", "indicator--66781af0-5cd1-4802-8b2f-e17c0dbecb47", "indicator--cf1efdaf-3eab-4d7a-ab87-8e10480f7bea", "indicator--f4769f6d-b99c-4676-8ffe-42c3af8983ce", "indicator--9c121943-fd52-4a91-8771-5017d0857360", "indicator--5f97851f-f472-4f38-b6a3-5e6a0da566de", "indicator--44b6cfb4-a8e3-4cd7-aa86-d066d42f6c76", "indicator--9be39f83-4310-401e-a2ff-978ef790a00a", "indicator--b664bb52-926c-4d46-b90b-3d3dd3ea44ef", "indicator--d2c34fcc-5936-47ed-80cb-4525dcc33d7a", "indicator--9bb8d891-f030-4987-b908-1868b795d112", "indicator--7e40635b-e531-4695-b73c-60ceb807b1f2", "indicator--78e3195f-15fb-435c-9a54-27614ce84232", "indicator--aa158eb2-52dc-4b21-8f00-40beb1d8e1ec", "indicator--905d8bd8-e803-4c4d-9400-33c84813e18e", "indicator--04abec27-330f-422d-8e41-c52b00faf5d7", "indicator--9beb347a-7220-41fe-ae56-b7e36a12979b", "indicator--24b9c4a8-d535-4b52-a6be-2ed3ea4afd49", "indicator--46a70014-a644-44b0-8502-8eb410eaccf9", "indicator--47e2d9fc-0c05-4d54-9519-db6809038e1c", "indicator--ceb3f0c0-8863-4141-a4c6-55f951847ad9", "indicator--0c3e5ccb-92f5-49c2-ace0-4cd49e4b11a8", "indicator--763968e9-71a3-42f8-a5ab-1c75306e1fa0", "indicator--bb28a719-1891-48ba-80f7-5fc3b0e556b1", "indicator--759bac42-0a1a-4637-b260-7d4267ee5ebc", "indicator--52e55ece-73eb-4091-a548-b6d5bf8823d2", "indicator--ef01dac6-95b2-4c38-a7bf-10e4795fbc39", "indicator--6d4f4e38-c075-4f86-aebe-03fdafdf2388", "indicator--fb69fa4d-b027-45cb-948e-7220f7af03f2", "indicator--a2f932d5-3770-4764-9c5a-c766040c0954", "indicator--8974209d-123a-48a6-a88c-03f47e355544", "indicator--3a50d759-a263-48e1-93e0-a53582461fd3", "indicator--91f31af8-e956-4ac2-a223-d560323eaa6d", "indicator--6dc37199-2d0a-4f4a-8f5f-13dad48b777c", "indicator--5beba203-4296-485f-88b5-0b6879ecce60", "indicator--0251da73-bfd2-41d8-8f07-1486e8fb3515", "indicator--7235c87f-360f-4a8c-9ed6-c9b42d2cec10", "indicator--a9a46064-57bf-4b20-ba09-041f898061ea", "indicator--78f1c58a-64a8-43c1-8116-744d1bad7971", "indicator--f1f2ecf1-ddd1-470b-a430-182fbafc1cc3", "indicator--61e4e97d-608b-4f4e-a500-652124ca3232", "indicator--08398d82-3321-4879-ac5f-473d7c55aa1a", "indicator--9763cd24-1e06-4435-8f82-35d20b62c68d", "indicator--2f60fe4e-98f2-45b6-a01a-b4842a089a50", "indicator--5dc95624-75f2-4875-adf5-99c0fc0a8721", "indicator--5cddb66a-abfa-439f-b14d-c428479ca6f6", "indicator--54ced3ee-a0d3-49c2-9e7e-626084856872", "indicator--9e94ed70-5dbd-4949-82b2-c22e6cbd58dc", "indicator--4c282671-215b-43db-b548-1786e4a3ca8e", "indicator--67cf42bd-cd84-4d00-81b9-0734f3c73fbb", "indicator--7bca1df6-7dd8-443f-a447-6fdf01da6cbe", "indicator--c2f809b0-557f-444b-a6d3-8366d2894d06", "indicator--8002ff01-f87c-4266-95e5-14d7e7d20d8e", "indicator--49b69950-06cf-478d-8da7-6764dae3372f", "indicator--ba025bf2-d254-4b21-b15e-8d98dcf075ea", "indicator--fc6f599e-d793-44d7-be52-76d23b1e9e22", "indicator--b5d2d58d-795a-4dd1-92c0-2820373ad147", "indicator--aeee0a1b-4bb2-4cac-8c06-0d57c1ae2383", "indicator--c022ba27-fc00-4954-9708-bce0aa577e15", "indicator--a0aeb549-d5ce-4de9-a2a9-bef9bd8be3d4", "indicator--9722a463-9bf2-4c70-9d87-5ad30f26094a", "indicator--c4748a21-b591-481b-b238-1ce2dfa91cf0", "indicator--e0d137f7-02a1-458b-a899-44512018971f", "indicator--be3f5bd2-22d2-4209-ba5b-41d4102d5c14", "indicator--432333eb-bc15-4c20-a232-2494afb7f18e", "indicator--0403432c-8e81-4d70-a65b-518328b6d1a8", "indicator--ae34446d-dba3-49ab-92c2-bb9ea24e71b7", "indicator--65750ee4-e554-4874-9f75-0cd39451ffaf", "indicator--c380bd09-5010-450e-a1be-e634be5ff1a2", "indicator--7d5feded-5195-4248-8afd-09c7b002089a", "indicator--b4b0bbe0-8e7f-400f-ae0d-570e11464cd3", "indicator--3091212f-a93c-4e8a-8036-0e239fbfb7b8", "indicator--62c19b0b-fcc0-4fa7-b649-839a31930aa7", "indicator--c75587d7-ac5b-43dd-bd6e-4224d45a596a", "indicator--c147ba00-0aa9-4628-b252-500a0b0f3c71", "indicator--3ec8292f-ad26-43e7-860e-897729c7bf6d", "indicator--17a47386-052a-475a-a431-0b71398086f8", "indicator--d0fdb0ee-5bec-40d7-8bb6-a283efe07b0e", "indicator--b172fa25-07e1-4892-889b-93e356a90406", "indicator--30d5f6d2-38b8-4f09-8552-95eddf396ff2", "indicator--3e02b961-fbb0-4aac-8276-b7914c9009ac", "indicator--3f6b8a7a-0a75-4887-850c-2211970f84fc", "indicator--b0f060bf-e069-4392-ad93-d3767be8d727", "indicator--6325bece-1780-44e1-a4aa-3355355a486e", "indicator--9addff5e-dec4-4ffd-a602-848d855b6c68", "indicator--549e1955-1b95-4157-8dc7-57fad714029c", "indicator--64db864f-427d-42b4-aae9-e31ad4d5c77c", "indicator--6b10ea81-6ca6-4551-8c27-d339d631f2ba", "indicator--e7af5ff1-e4ab-489f-80cf-f7d4d6b71d93", "indicator--2b0ae94c-3066-429f-859d-9b454d5a5436", "indicator--d8c15d99-1e31-4fcb-92d2-2093090b67f1", "indicator--183c4700-476d-49a8-9e05-3263306e67ee", "indicator--979c35f7-c95c-4028-98d6-2d582c683912", "indicator--a04d55d3-5ca1-4c39-8e83-b21ce965c01f", "indicator--332aa089-0c20-4b1c-aa4b-3c13f93c8201", "indicator--cd9f2c80-d6eb-4a3f-865f-2fd260a55773", "indicator--dfa709fb-d9ad-4905-aa59-73b1b5a4cd36", "indicator--98fbf004-76b9-49e2-8ce1-4cdaf89f6e62", "indicator--58da1eb5-b3f4-42ad-928b-921e88815a8a", "indicator--d40996a1-a1fb-481f-bbd3-6e50c7c2c182", "indicator--8b42654f-83bd-4d6f-9db1-1cde1565ec1f", "indicator--34136bb3-3cd0-4dbb-8c4c-722862af63c3", "indicator--92c2a508-4609-4b6f-a5bc-a63e5d1e3177", "indicator--dafa5286-ccce-441d-a802-1ef87905a4d5", "indicator--49406036-c060-4937-8499-086571ea0f2d", "indicator--362a86b5-01e3-42e1-8592-d71da3601be3", "indicator--7b394132-f970-4574-853e-6b2b9266075b", "indicator--175cef26-9868-43fa-98d4-b71a1e970e07", "indicator--ec6bbb1d-f743-44ee-8818-ea3ed4869b5a", "indicator--9f84fec5-135a-46aa-b330-c20d4ebf3d53", "indicator--a2e7fdad-4d19-4e99-a26c-9717bcf08ad0", "indicator--fb902ab2-e9a2-42a3-b46f-d887264ee1ca", "indicator--36faa058-e552-44e8-8e58-33fe46a3f301", "indicator--5d49143b-bec5-4cc0-9137-5bc1f4e25667", "indicator--7f8aa3ac-2721-4972-9e31-c3d24d7c49f0", "indicator--83bdac42-c7cf-49d2-946b-ea00e9fc9c25", "indicator--9a43d067-7c14-4e90-b941-653afd55da79", "indicator--4b3b58cb-3245-4f93-83e0-0e2cf6d9c9f7", "indicator--9d4c8712-ea37-4eb0-86a1-7cb8f7c8ee9a", "indicator--a3846aed-9a47-4951-a6a6-d7798eb800d0", "indicator--f505ae75-641c-42ea-ac01-c8363ff52b4f", "indicator--cedc4ae0-505f-4aad-8476-187bce7fc586", "indicator--6d3616db-bdda-4eef-b90a-8b227d2ec098", "indicator--2a9b5729-ec32-4d03-8876-4fb4d2852cdc", "indicator--31e94898-82d3-4492-8768-7f3c968dce05", "indicator--20f99263-1ad8-47c3-9d00-223419563bba", "indicator--afa607b1-0d55-4564-8fc5-062387018932", "indicator--209728f7-0c54-4437-842b-60ab21038a77", "indicator--cb0999c5-6f5d-4f5a-8382-4728bcb3b1a2", "indicator--21c593f1-435f-4c90-8d75-be7a0b3e881f", "indicator--5e86c746-3b3b-48e4-be29-39f760a71bbc", "indicator--9843dad3-3407-4c17-8748-c0eccd5a78e2", "indicator--64dad2a4-515d-4b25-bf26-36b9a807dc13", "indicator--66a2b031-45e7-4afc-87d7-d78b0d91942d", "indicator--cee204df-074f-42a1-8c9c-84b8b7c1bfd9", "indicator--e5eda4d6-d2f7-4dc5-b8b5-a80241442ea7", "indicator--608ad992-70f9-4384-9313-85f2f84b6969", "indicator--fe183854-106d-43eb-b3cf-140107508c0e", "indicator--af38f9a9-a7f4-40fa-a07e-4558762a168f", "indicator--bca6f68f-8bea-4da6-bf3c-56259b39321a", "indicator--ce0e805e-2918-4828-bd74-324c9aca7adb", "indicator--2eca20ea-7fc6-44cf-b41b-88332bd18b6c", "indicator--6c589a09-e396-4583-996a-c98d145bf0ec", "indicator--c036db63-967e-444b-9429-6728a996d454", "indicator--696b2148-5ffe-4302-b4e5-1b747f208eb1", "indicator--dc76dd6d-f7d3-475f-9d8b-9d7f880263f8", "indicator--61337342-3759-4bcf-9962-3daf4a778f59", "indicator--7fc66eb8-134a-49b7-a2a7-b07b7b5db904", "indicator--c0ffae65-af32-4f08-b1bb-ad1790fffd17", "indicator--bbcc9046-0e55-4454-8c4b-69c5f708e18c", "indicator--db3763f2-26cb-4bf4-905f-fb69f5496b26", "indicator--c1da22d0-2249-44fe-8b48-8c891de2fe7d", "indicator--dcf4f026-c631-4fbd-bda0-162444c58f3f", "indicator--5fcd05d8-a19c-4fd7-af37-2859e1f04416", "indicator--a1c390d0-4ccb-4f4a-afe1-2659f2c4ce69", "indicator--3a319361-cd92-4fba-be67-c6c173faca60", "indicator--d76da208-7fd9-41f8-b540-5282d007d7e5", "indicator--94cf8aa3-e2df-4303-8a68-c84f9d649b40", "indicator--4fa58e75-9eb5-4e6a-bea8-b7906e62676b", "indicator--0c71325a-96c4-4847-aa12-595996c7801d", "indicator--6b450f4e-3daf-4223-9cbf-310d5157e028", "indicator--fb3b3d3f-7aaf-47ea-b3d3-f4804ae79017", "indicator--817f0039-bcc2-47e5-a472-f33aa43ca824", "indicator--51df39d4-f36c-46fa-8eec-372b022812eb", "indicator--6b084dd6-3e21-410a-9948-974bf9b67107", "indicator--22dcd83f-5d2b-4d69-bc07-c30b55ca62c7", "indicator--c0d033b3-8e2f-4acc-ae9d-632447ec06d4", "indicator--801c147e-5de7-4e86-8683-01e9d4fdd8f3", "indicator--7b886d95-f406-456a-a6a6-0c79bc6e06fc", "indicator--82671ec0-db37-4630-ab1e-f9521f0c7640", "indicator--c4a3a0b8-ee88-4c85-afe0-f5a6314de64e", "indicator--b8582594-589a-450e-8eec-c377be5a54ba", "indicator--e4f2d58c-45e0-44f6-9ed2-3b949a4fbad1", "indicator--bf679104-43d7-48e8-9f18-25ddbdd8ca2f", "indicator--b15da2b0-0bcf-4b0e-ae22-16fd40c6f255", "indicator--29588fc5-7805-4347-ab88-0992d649d341", "indicator--6939a0d9-f257-4707-8d46-af65b3d89fdf", "indicator--0e7ac958-4fbb-46cb-9e3a-3d98ce0757e4", "indicator--bce4ff5f-a01a-4e96-920f-bb16eb17bb30", "indicator--1ea4efb6-2545-4d82-b9ad-223504be145b", "indicator--a0986568-524c-4ac7-9396-5b6a3bf9b4eb", "indicator--609d1fff-978c-44e9-8d6c-93200415dbbb", "indicator--4cfa6c4d-df8f-40d1-9953-a921a82c0e9e", "indicator--be916af9-6d36-46c0-9c1d-950f66d13ae2", "indicator--cea0b831-448e-4155-a824-6b978e1ba024", "indicator--6e86e9ed-1517-4f83-a2a0-9693ecb84120", "indicator--6c69f495-4f7d-4362-953f-0fc171389285", "relationship--7eccddc6-a163-4605-a249-d45fd08488a9", "indicator--71d1a311-f846-4d16-b93f-1698095e41ac", "indicator--dc331a31-55f9-4ab7-a2c2-fe61190e2fc8", "indicator--aaa70c03-f8d1-4f48-925a-b883dff02ffc", "indicator--a8e66c01-2070-4f6d-95da-65a3b97143c0", "indicator--55c39fe7-d9b0-450e-811e-2b920dce5065", "indicator--7c6a5d33-4d39-49fa-9700-9561dc7306a2", "indicator--882deb9e-7379-4ed6-9505-35ffb86dbc75", "indicator--e15a5e94-ae80-4078-b49b-2c21cfef335e", "indicator--b3987858-7b3e-4346-b4d7-70a3fca8e480", "indicator--41589d69-bc1f-419d-9236-6ea775053ef0", "indicator--0a043015-82b6-4ce6-baeb-9aa9ea21b54d", "indicator--38104e95-b052-4eec-b894-da3b681e33a0", "indicator--f7530bfd-a171-455d-b7c5-3971904a1da2", "indicator--9a634caa-3d4b-44cf-878e-54faf5b00951", "indicator--7e099542-bd12-4bba-889e-0da02eec10b4", "indicator--451af9a8-5675-4338-94fd-1c72fc2a966c", "indicator--bc1b15e0-3e10-41f7-95fc-51f469525cd8", "indicator--fe084f65-feac-4829-b13c-08d2790ab86e", "indicator--bd9fa65a-c984-4688-97bf-e12066222e2e", "indicator--78b0a14f-1d92-4ea1-8264-7077340447b9", "indicator--c14d7311-54d9-4201-91d8-59852231bb53", "indicator--7b0c9663-8bd1-42ce-aa1f-d0ac4a036427", "indicator--88230aac-80d1-4c1a-b709-5382d9758bef", "indicator--aaf35ab6-7059-4684-a11c-0f01ef005352", "indicator--5c8ca210-5485-42be-90a4-fb923bb4a274", "indicator--30e966f0-25d1-49b6-89c6-f7d367480049", "indicator--a579e3ad-7c62-45e5-bd76-30e103594a58", "indicator--4198f39f-a4db-4b2a-bdbb-d5a2c1f2b1df", "indicator--5b44d9e1-01c4-4e50-b7fd-c7f41970dc87", "indicator--f050938a-ef46-4df1-bbe4-5b825d7e2918", "indicator--095a3a4d-9241-42cc-b9a2-d9cc10b52f90", "indicator--fde1cf8b-110e-4dd0-9b2b-122e5e80b97d", "indicator--d4c38fa5-d3ce-457e-a3a8-39761134496f", "indicator--1c1d05ad-9f85-4abe-a756-880b74fd8641", "indicator--bc5028b9-3b0e-4892-9595-cfb3d95e6f9c", "indicator--66d73dce-7161-4f57-b131-a70e1c20d487", "indicator--447cf199-eca4-41e7-8d98-9cc996e8b778", "indicator--337db618-55c0-482a-9e7d-9aca75875ea5", "indicator--4c08968d-4fe1-48bf-9c7e-a54b6bebeddf", "indicator--94487ebb-85da-4426-a9c1-9666bfc95b18", "indicator--be9af8d7-dff9-42de-952f-ff66f2b955e5", "indicator--9afe1fbf-7733-4f6a-9eec-8df5afc6394e", "indicator--d580ed8f-a365-4645-8bf3-29cd288c3871", "indicator--68f10dc4-ce6b-40a2-b039-3cee9f2fb0a9", "indicator--771fa962-e840-40dc-8fcd-106947a0966d", "indicator--58bbda84-f2e8-4d0d-8972-b5fa9a9814ca", "indicator--5cd119dc-6d09-42a2-88a1-91b085e9fc89", "indicator--8cfc5b3f-c3f0-4caf-92fe-9292621387be", "indicator--c17eeb1d-21b5-4fa5-a0fc-e7e7ac84c11f", "indicator--698b004a-e76b-42eb-bc8d-cbb6a769a10a", "indicator--167c76c2-cdd3-4392-9a7b-5bda469c7ac6", "indicator--af4bd19d-b4de-499e-838c-78e1e6bf77b4", "indicator--8aa146ed-9d92-469c-bacf-03ea9ac94b9a", "indicator--7a9bc33e-e974-4398-b41b-9d84c0522024", "indicator--1df84dd5-4113-42f3-afd1-1f02ca306299", "indicator--23cee534-afcd-42d3-aea9-df6cddde90dd", "indicator--5ea7408b-9ab1-420d-bc5e-fe07a21a1ec6", "indicator--bc5c66aa-2679-42e4-b909-f1868acc0a2f", "indicator--3fb5a073-03e8-4225-8015-a0287bc2f558", "indicator--beca1618-26e5-4ebf-99b6-84aab5103400", "indicator--a957d810-c311-493b-b18f-0a074467c347", "indicator--658306ce-ae49-4aae-b48a-6a948358abfc", "indicator--3922cb92-1b68-42a1-bb3c-98db40655aa2", "indicator--526862ef-cea2-4a20-b255-55ac11367c40", "indicator--88fdcb9b-3b75-454e-9f41-39084b65ae9e", "indicator--77276ea8-3738-47b7-8d22-4ca0505bf2d1", "indicator--f2a49b9e-296b-4fcd-a307-b7e68d2e7b73", "indicator--9de92e29-5a52-4931-a6e1-e5d74373c246", "indicator--2ca483a9-25b7-4a07-b7d3-06900f94bcf1", "indicator--ff68c900-d251-4383-a7f2-dbbf7a0d43a7", "indicator--8e2934d0-eed1-4751-a31e-8d7e45f8de4d", "indicator--b414baeb-d45c-4f86-bbfb-a6b408d6a7a2", "indicator--222c9612-ba69-4cc6-87f0-85dbe3f9de34", "indicator--7b078820-41bc-4829-b795-44ce16d2f828", "indicator--efda8bbd-c24e-44c1-bdd9-78453383f419", "indicator--34b96ecb-fc96-4d03-bd2e-028713c4ba4c", "indicator--5069712a-d361-4f19-916b-7c1284d6ca9f", "indicator--4fe51a6f-d8bf-40b9-897a-4a4122812ca0", "indicator--2cbfcdc9-856f-4056-a7b9-0b4ef7f9a0c2", "indicator--222371bc-8b15-4da3-b5b8-ac268a6c6713", "indicator--687072ac-9f9f-405b-ac76-059826c17eb3", "indicator--594fe362-b01d-41bb-8c76-15797cce571e", "indicator--97bfd81d-4bca-4125-8d44-0b891c6747aa", "indicator--1b0f73d8-d04a-49fa-954e-650c3d9db1f1", "indicator--b3524e8f-560e-4d6e-8ad6-e7ed44fd0c4e", "indicator--e6e1e159-186f-4ad1-b9ed-fd06b2128386", "indicator--21d40e25-9906-43f4-8c48-e94794b774ac", "indicator--a9b5a568-9bba-4908-affd-eb6e4438d98b", "indicator--0b4bfdc0-29ad-4139-90c4-f9b9af4ba3bb", "indicator--022f6d5c-dbca-4eb0-9fbf-b8532dc7144c", "indicator--dcfd8934-1a7f-4213-b4b2-a994dbebfc7f", "indicator--3ed4a52c-973f-42d6-81aa-fc5996d1a852", "indicator--4a82095a-a50c-449b-a38a-b7cf36043693", "indicator--a553f453-150f-48e6-b420-cda614cc2d87", "indicator--fddf5072-4f3a-49ec-baf5-890529a34195", "indicator--38f7d839-6ee2-4b50-8cf0-fcc5da676da9", "indicator--a2e555d1-1ec6-4e67-b886-203a6b55065c", "indicator--86ff7622-b74f-4214-b812-d25428b1b1c5", "indicator--de606e5b-041f-4c5d-a1b7-38b6d68267a9", "indicator--4052561f-c623-41dc-a1a7-57e5eda41625", "indicator--5e0c631a-486f-4679-9aab-c42b7edfb4db", "indicator--969279d6-b1f2-4dff-a8e2-5cffd17db387", "indicator--688da1ca-19d8-4eaf-ac2b-2977e5f00726", "indicator--874a0a69-4701-41f7-88f6-28fa3bf94499", "indicator--6c6504e0-9f31-4329-a6a4-f589c476a3da", "indicator--e5320e55-0bcb-4780-b47e-9ddac96dda49", "indicator--fc3ba974-8ff6-47c8-a0d0-24c7b990c733", "indicator--b945bfc1-1146-4189-a893-8fa547c509d1", "indicator--d916ff32-7235-4281-8fbf-9f2e49466309", "indicator--25b7851e-3fc5-4cfb-82d5-c577f5dcfe70", "indicator--a39784ad-d3ed-4685-8780-cca81654ccdc", "indicator--eddd9f06-38d2-47e1-a24d-028b8bc4a66b", "indicator--d46cfd65-0f61-4700-afc6-bff46e7afc1f", "indicator--d159f733-40ea-48ef-93d2-8f8b21c2ef42", "indicator--f98eaaa0-6e60-4420-b183-4b0a059e93ec", "indicator--9d93af4b-6e40-4cbd-8e2a-281faad1243e", "indicator--30586fee-fbba-425c-848b-1cdc6aec980f", "indicator--41203bbc-d1d9-4808-870e-8e513fe54037", "indicator--1bda075c-e79c-4f8f-87ae-afd737fc929f", "indicator--14cf6769-5693-400b-b058-18125f929705", "indicator--7497238c-ce75-4e6b-b5a0-ceac9ff639b7", "indicator--9c1ab4b0-ed3a-4b45-89a8-25ed64235b6a", "indicator--c2da2400-03d5-4884-a2fd-57245be4c825", "indicator--f663caee-c1e4-4939-94e5-2de443fc2363", "indicator--bed3603e-dda3-4992-970a-2206ef905a2e", "indicator--37bf9fcd-ba21-4b6f-8296-41876347d5fb", "indicator--044b335d-934a-40ad-83d7-4113ee2c5b73", "indicator--168ed01c-f585-4b0d-89f2-e6287be3bfc0", "indicator--8cf87648-134f-4c7f-9b2d-f3a4eba70dda", "indicator--746c2c0a-a0e7-42c7-9dde-96714f7ef2e5", "indicator--7ed1b636-d068-483d-af43-f378e66e7e56", "indicator--36afcc2d-1aa3-49fc-a72e-c8b6772a6f6a", "indicator--96445bd1-8e87-41af-af26-eb0315b3fc91", "indicator--d93f6daf-f881-41ce-930a-6196b34cca22", "indicator--3688c592-36ab-4568-99af-4a0ab94df4fd", "indicator--9c25773f-45f4-4d61-8584-3a7dca84a5f3", "indicator--a24cec69-a8a3-47e0-a0c2-219823776a08", "indicator--ccf142a8-597e-4375-beeb-b4a23c3ec91f", "indicator--86a25ebe-8593-4a54-bb9b-077762c6596d", "indicator--3d578ee7-08ad-4cec-864f-3480c0497397", "indicator--918220a6-6a75-4c4c-9201-c813d87baf03", "indicator--4f5fe976-d7b3-4d8f-bf70-8cfd2178122f", "indicator--7974d483-1703-4975-b041-69104ee800b0", "indicator--ded1e511-fa98-4d82-b8eb-84a8d147ba95", "indicator--3021f545-7eec-46ed-bc1b-9eec7b288791", "indicator--acf2c203-9ff9-41d6-b618-ca468ed12b24", "indicator--1dca625d-f96b-41b1-a4c1-57094f92d48b", "indicator--15241e75-afd9-4755-88d4-05e56ff327f0", "indicator--8ee5e682-a2bb-48d5-bed1-f8b0a7ab0293", "indicator--cb10f872-3135-4539-a628-c8549d0da51a", "indicator--4385f77b-afba-441b-9317-4ee14b0a6370", "indicator--52ab1e40-dcf2-4c39-874d-b379fe6ed302", "indicator--184315f2-dc66-4e38-abed-b992668dc460", "indicator--092a100d-4bb5-4b35-9f3c-19ca08a860e5", "indicator--b695f064-b73a-493b-bb42-3945825f989e", "indicator--bb3cf70f-2e27-4900-8d01-69ca10cf14a9", "indicator--136945d5-8516-48a5-a490-6aabc253f164", "indicator--93c7e366-efd7-49fe-8330-b3502373833a", "indicator--03122b8f-3bab-4b63-9d10-6f3e0e4ec98a", "indicator--41b852b9-7d6f-4abe-8e40-0748df219de5", "indicator--63d75991-80f4-4c35-b83d-3ee6c05bed44", "indicator--0684d2b8-e081-429a-9a20-aabbde156b6d", "indicator--9b45b15d-1e42-4b9e-8c0a-59fde64df8d4", "indicator--2e00f87c-be95-4317-8a9d-46e4a056e9b5", "indicator--04a30455-0bc4-4e62-bfd2-5084852c80a7", "indicator--603f1393-0799-4cb8-9d71-0b53f62ce99a", "indicator--d89c92c4-ec93-4834-97cd-e46424020392", "indicator--c55d0a4e-8256-4645-96b2-6b7cf050c5d3", "indicator--1f8d094c-d089-4428-820d-8a9a9261fb6e", "indicator--3f7884e2-3c36-4f19-9fff-a4105bb48835", "indicator--97aa5b01-a92b-44f0-9a4a-2f373270e39c", "indicator--8535f42a-9983-492f-87ab-5833899e1b07", "indicator--27fd45c0-bab0-467c-b5c3-a1d461801a4f", "indicator--e446f7d3-b5cd-46b6-82d2-69ae387fffa9", "indicator--a75ea530-2b05-4911-85e4-35a6c08345f8", "indicator--77a512ff-4b00-4ba5-b11c-9542ef5a168a", "indicator--0cef1dc6-1feb-474c-be47-2774f6cdc29e", "indicator--0a44ae6a-ad53-4e2d-afc3-f3351690b7fa", "indicator--ff260135-20d0-4594-b370-14747baea709", "indicator--8270a36e-521d-468b-b720-8f4d068c7f56", "indicator--7d76b070-9c9f-42dd-9a29-4ab21ef68870", "indicator--50044d0d-231b-4ee3-b10b-adee52338c74", "indicator--6e96be21-e250-402b-9561-9315037bac78", "indicator--7b0b3020-4433-4818-a342-234e8763163b", "indicator--1c98875e-1b0f-4c63-a8e5-9da119991fd9", "indicator--96433b8c-1b23-4c55-bd50-cd139314eeae", "indicator--77f39165-0c2b-4c68-b2e3-bcebac25dba2", "indicator--c2941759-ea99-47df-bc62-8d8415aa4df6", "indicator--90eff847-ad21-4741-a504-5c01750f0aed", "indicator--aa2c85d8-722d-4e40-a296-323428022a40", "indicator--44fd8674-9101-464d-abea-d5172e3b295c", "indicator--a0d967c5-4b37-47aa-86db-fcfd0b6311ac", "indicator--55804ef4-a6b6-42ed-8c30-19f67451ec4b", "indicator--dff1782c-e6c0-453e-9959-bdc2c4040578", "indicator--9826db27-1e78-4f01-aea8-efc59b09e6ca", "indicator--8b683a39-f5de-4e91-875e-e6980c0f9c0e", "indicator--941d9bc7-36ac-4e68-97a4-f0cf7d7b2cb7", "indicator--7c9ec8c1-9793-460e-9f72-9ebac230ec89", "indicator--bcce9f23-5105-4c6d-8d66-01fef2564267", "indicator--81dcbde9-0cf6-49cc-9565-ba0d11a73dd0", "indicator--16b68579-052f-49f2-a8b3-d2cbbc344d81", "indicator--2ebdc8e4-9f40-444d-bbe3-81bdb7e1429b", "indicator--9c9480fa-c96b-44c9-a742-506f3f77ef4e", "indicator--609b893a-5669-437a-935b-67dc27cccee2", "indicator--67ba3de3-7d58-49f7-8fdf-518f69b4814e", "indicator--9c0f68ed-e205-4c51-b4c8-41f7c0bcc4a0", "indicator--655f026d-fde1-408b-9aeb-feea60ef11d0", "indicator--15ec00bd-fdca-48f3-a057-b7e4ccea4150", "indicator--be097672-8718-47ca-8c8a-194ff3652291", "indicator--21ae9120-58f3-4155-8ac2-f64cea36427f", "indicator--9225e41e-b3cb-4f2c-a5c1-b611b4542e3b", "indicator--21fbd1a5-1402-4c15-87d9-376708fdaf83", "indicator--539d1377-19a9-4d62-a8d5-8d9f4e373416", "indicator--7ad84fb0-37d4-4dfa-a5ca-86f802b97c2b", "indicator--955a810c-2736-47d9-90b5-98e6798dcfdc", "indicator--cb7fa2e5-b287-41a6-8fb1-41d8c0e4a660", "indicator--379fccd8-d602-4a71-ac57-83a995dc4dad", "indicator--765b6175-7dc5-4ea0-b7b7-6cff57e136a4", "indicator--8bb8ff54-8fda-4e55-b84a-6fe0e6930aa8", "indicator--4bd2e16e-09ec-49e2-849d-5d1c3d6a775f", "indicator--c105b12a-3ad1-4a8d-8868-4c4c8af16355", "indicator--85f0a8ca-a0c4-4a55-96ab-a6cb997e611a", "indicator--20df3403-148d-4b27-84e6-ebb4f31b8612", "indicator--8e298860-edc5-47e5-9a95-b85dd49ed828", "indicator--c31a24e1-ef6f-4caa-ba6c-1a4136fb45ca", "indicator--2baf0617-2e75-4244-ab9d-459839c2ac89", "indicator--470496dd-1a36-4981-995b-b211a2543b6d", "indicator--c207c590-283a-4418-a5fc-ded77a12eda2", "indicator--6c4e4fc7-b6d4-4da3-b07e-c504850ffba2", "indicator--74869464-9196-4a4f-8387-0d5abac090e2", "indicator--ac0f9fd2-6e89-4edd-92d0-a94d1eb7ccd8", "indicator--9811a596-ac17-46ca-a834-45193f755ef7", "indicator--329317c5-2c29-4b02-8e67-0fdff2af8459", "indicator--f5f3ea99-c100-4a09-88ff-a3bf423dc86b", "indicator--2c93d8ff-0abc-4946-b83f-a17c9152f876", "indicator--bbc9ddab-514e-4ccb-af50-d58283230e6d", "indicator--4e751c23-76ca-427e-bd6b-4e06400a6165", "indicator--4842a30d-9168-4faa-aa2c-2719b717c498", "indicator--08f8c992-f890-4a7a-ac05-1e9039c84583", "indicator--edd22e12-8aa0-48eb-8189-5c0504a644b7", "indicator--98b9e158-8c7d-4be3-8dac-8a2644e1cf05", "indicator--3bd88461-d89d-40ca-884a-9e6b3da08038", "indicator--e6654c77-b982-401e-b8bb-8f2b3c20ffc8", "indicator--1b04c85d-d8ea-42e2-841b-3fa6e3f39ab1", "indicator--44757802-23a2-4848-8623-0250801fb061", "indicator--0f8143dc-4010-4be6-a93c-8fd80ab2c407", "indicator--043531d3-79e1-41a6-b8ee-93139ff80c45", "indicator--cbead0b9-0b6f-47e4-9c2b-a78b2d5a0a57", "indicator--2e722aab-9fa9-4656-bdf1-d5ed9be4963e", "indicator--d5a1025c-8c0f-4907-87e8-2bb8d1f58783", "indicator--b40e58ca-5259-49b4-b338-c6156b31b39e", "indicator--01979dde-3493-4b8a-9c77-adf96d722b54", "indicator--f07324eb-cdbc-49e7-9f34-5f9bae132844", "indicator--7acc8e9b-6dbb-4d7d-8e5b-48c4b57f6f35", "indicator--ad4668ab-ae4c-47c0-8cb2-de4c0d469742", "indicator--483dd0c2-1eff-4a67-b0f1-8f2bb61c2001", "indicator--50b0dc71-88a5-4a48-876b-54704ca3d6be", "indicator--38f9668d-d647-4633-bd28-cf02813eec7b", "indicator--34f996c1-d1b2-4711-bb97-7ec9e41d6d82", "indicator--fc9a805b-696b-49a1-a293-6381382a32fd", "indicator--edb325cc-af29-4914-8ac6-8e76eaa2c8f6", "indicator--9081c2be-97ce-42cc-ba31-a09b1e3734d4", "indicator--c20c4d00-300d-47e4-bf5b-777020d9c4bb", "indicator--14afb0e3-801c-482d-bbbc-a9e4a115b0b8", "indicator--11ad3a13-d3cd-4d0f-b1cc-e6b74351b671", "indicator--3aa23513-225d-4e74-96bf-bd714e1d225c", "indicator--3397e7b3-6b7b-4bc2-a3cf-69005db68028", "indicator--8b276bb5-b7cf-47b7-a7e7-eec29b1b8200", "indicator--43809daa-f1f4-45a5-8e1d-855e6f29c09d", "indicator--882e624c-0aba-4708-9987-6664690d1fd8", "indicator--51b612ec-2df3-4462-b6ff-832db992164b", "indicator--3d6b3e82-92fb-4c7c-8306-6c9c9662dfd8", "indicator--e4eb8c3c-0d2a-49bb-af43-f124606ebd09", "indicator--790eed66-dab0-4232-a70e-165fe6a9d662", "indicator--32043466-4b14-4321-b640-d499d9dc78bf", "indicator--d5dea16d-508d-48ac-a535-2d2b1a72c53f", "indicator--de519097-20b0-430a-b1a0-ec29423b82b8", "indicator--8488d470-b0f3-4a99-8126-4298a751a9c2", "indicator--a1096b72-8c12-4296-b2c2-8015e183271c", "indicator--dc599d4a-56e1-4b0c-9f8f-c6a19e487130", "indicator--7ef03e1e-d702-427c-8d6f-35d83f7b90ac", "indicator--c2f0889d-0e07-458e-afc7-827f6c61ed6e", "indicator--530fc138-dc03-4ab7-870f-433caee91e3b", "indicator--d5697913-6d0a-433f-b4e9-4dbee1a23805", "indicator--4c86a259-9bf7-4520-ac50-5a1e3e662015", "indicator--cbd78330-6bac-40e3-8119-7c5209cd926d", "indicator--f459e06b-c21f-4fa0-8808-5ceee4b28743", "indicator--77869185-84e5-4ab5-a14f-481983fe593f", "indicator--104b131b-27ba-44b4-a96e-aefb1bc82047", "indicator--d73bdc6c-c9f2-4563-bc3b-8a5ba7e4e3fd", "indicator--1608709c-0ad0-43b7-b0d9-04f16c7b42e2", "indicator--b73a8cbc-7360-4c6f-8c05-f8fd231b8e4d", "indicator--0a8ceb75-6d39-4cb0-9614-3ab13d7dd68e", "indicator--32a917b8-0b27-4657-a19b-0ef5b6a14732", "indicator--fd89533e-aa5d-49b8-857e-8bec3f4e2e67", "indicator--0e23c62a-036c-4e6b-b906-e819191f8e40", "indicator--cc90140c-8dc8-4f18-92b1-d538dee026ed", "indicator--4e4e7c82-3ccd-4b04-a18a-fb424f15155a", "indicator--644b6dff-7a6c-4a32-adf4-42c94ae147b6", "indicator--bd7c86a9-90bc-4e70-b4b4-d831954a7748", "indicator--443ff408-4959-433d-bcba-4494edcf5a31", "indicator--6469b8eb-7a1d-4304-99f7-1c1f83fd5d3b", "indicator--76c43d11-5d58-4423-b069-9e363f8dff41", "indicator--b251c83f-74a4-49f1-92d3-e7aa834da030", "indicator--7a913dc5-873f-4a44-9e6b-a834101402ec", "indicator--18e7d8e0-eba9-47b8-91df-79646cd1cf34", "indicator--53c85479-f3d3-406b-b646-6d5ebfc57ed7", "indicator--b37d3b7c-60d4-4795-9eb1-2d841f4a59a1", "indicator--c2dfd294-9fa1-42fc-b5b4-819d82fdd493", "indicator--c6aae0d7-3838-4fa5-bf06-f4b9608f2860", "indicator--09e98bfe-e2d6-49fb-9f0e-d1677da76289", "indicator--69ee47d5-a36c-4aee-be00-4439c9c438f6", "indicator--01628d01-729f-4a9e-a7ce-762b98e0ded9", "indicator--16ff2e8c-b9a2-4c3f-95eb-964b45f2e539", "indicator--9602f850-ca70-42d4-9eef-a14bee93f535", "indicator--7887112a-21ab-4281-8b33-7db1be879dfc", "indicator--75c985cf-19ab-4d8f-a59b-a0189928deaf", "indicator--7484d230-c40a-4ec0-a973-f8a0d106afad", "indicator--cc90095c-2a71-46b1-94a4-e5a3fdf3d128", "indicator--7d4a9e6d-76f0-42ab-8fa7-e64458d2bcaf", "indicator--60e03b95-c237-43c3-9961-f5551e4cef79", "indicator--5eb04af7-c569-4e9f-842f-cd4a64f03abe", "indicator--57bad440-7045-48a3-9b45-f2ff20e6f5cf", "indicator--077cd52d-bd5c-4e49-ba26-7465ff226c18", "indicator--28e9db91-e0f9-417e-94f4-c2b2a4181b90", "indicator--257c3681-1662-4a9f-96c4-a8a93554e059", "indicator--b6c0a96d-3d38-4de1-8ac3-b627f185b8d9", "indicator--2e411187-01c1-4ea0-8723-995f0f9008d2", "indicator--7f8967e1-6df9-49ce-b1e5-501030419333", "indicator--44995900-e1c7-4ecf-9ec6-70eef0f6503f", "indicator--54dad13a-2612-4029-9a82-6cbbc4888625", "indicator--8fae7b6d-9412-4a4f-bf06-9a6f4dc254a2", "indicator--1fd7261a-71f7-4035-a861-537f9967d7d0", "indicator--1dca0cbd-fd07-4909-8c00-fa7a5cdb3e03", "indicator--2b5c07ea-6a3d-4c0d-bd6d-6a43a91bcf07", "indicator--2d45908a-870f-4b13-8142-2c1c771bebba", "indicator--34e6973a-3f17-431f-bf0e-59d804ee1ca1", "indicator--93c6d913-86e4-4503-a89c-c0d3b5306330", "indicator--cc276e84-6af9-4669-b268-597dac3f9921", "indicator--4263a871-26c7-44a5-a961-4b1cc762292a", "indicator--4fd3c1a6-638c-4c0a-89b7-7dbc7fd2d2a4", "indicator--27ea5440-d06c-49a9-bc5b-f7f2fa214179", "indicator--5f913c45-43f4-444e-8c07-708f7f0ecc2a", "indicator--81ab1e10-858f-4320-a749-2431adb3a412", "indicator--43cfc563-896c-42f1-896d-a91e47b7333f", "indicator--8b0f76e8-b607-4e2e-9c61-d675cb885390", "indicator--ad16ce8c-9224-41d9-b09c-b62c318b3f5e", "indicator--d04e5fe8-2f0e-462c-b7e6-ee9d7315bc29", "indicator--bc27f5fe-f883-4e0a-a334-c20875189b58", "indicator--5cdfc3b8-b7a1-4160-b9a5-6a06b1539287", "indicator--bab969a5-bcfb-4540-9f16-dd25a4cc83bf", "indicator--273ba56f-5544-4193-ac74-6fe46743c3f3", "indicator--6dcbaadf-8aea-42f8-a91a-8cc05f0fa2c6", "indicator--1a794c10-bc27-441d-9714-3ff9dc1d5f50", "indicator--de5a5906-ce2e-4408-8984-5c454e418640", "indicator--e4e5ff55-baf4-4bb2-b4b1-04e79192eb6b", "indicator--9e3855b8-d456-46ff-91ca-4c1a4b8ab895", "indicator--7f1770c6-c9de-4f42-a880-c91a1026f7ad", "indicator--298ea148-cfdc-4cef-a8f7-6b1462f57a35", "indicator--3c00c327-e4cd-429f-97bc-14f727dacd52", "indicator--6b5b8845-b50a-4355-91d0-497338ad6c27", "indicator--bcf9cb36-284a-44b9-b42a-9158f3d74b3e", "indicator--02e5583e-7a46-4d38-9a27-79795af75464", "indicator--5255c697-e673-4d0e-9d0c-a7eac31e8d7f", "indicator--4d0ac81d-c21f-4f92-b682-fa17063c8db8", "indicator--b6358306-4413-4b45-8354-643e5145bb5e", "indicator--5c5c9481-945a-4f85-8f56-ffed5927a586", "indicator--884797e6-5237-48c0-b5b5-ac8bbbf3bfe3", "indicator--c98f13f3-e932-4a05-8121-10b24218fe20", "indicator--442740ab-7158-4c22-961f-a51dd7b71058", "indicator--effae6d6-521c-4161-803b-b4d54b1170e1", "indicator--e5f92e25-3ce8-45c3-8001-721cd8a402bf", "indicator--4f06c2e1-b729-4fbb-bf13-330ba0d78566", "indicator--1851815f-f1b6-490b-b851-607523497916", "indicator--5b03fe64-c059-4523-9307-e5dae0507471", "indicator--5b76d41c-3d64-4434-9997-dd36f75d4c62", "indicator--7e47eb92-cde8-4ec5-bb06-7159515ec9fd", "indicator--6b0ef5c1-5ee4-4430-a180-8feaf8b66c78", "indicator--766e3dba-1ef0-42da-a45e-199655ecc7dc", "indicator--7db2b2d9-65a6-448e-9447-acd55a427b34", "indicator--5226645b-fe02-4645-9fb9-d71e0449c7da", "indicator--65c7ba71-aead-4496-9ef5-4a71b5ed32e4", "indicator--7dfa2749-55a4-497d-bc95-de8cab26390b", "indicator--b2efe4f6-d5a6-4ea0-8b35-6f93b5880ec0", "indicator--ce57d855-af1b-49ff-9271-e568f94fdcaf", "indicator--e534a888-4406-429f-aa5b-b5d7a8b8923b", "indicator--983e3435-474b-4e8b-bf89-2e641dc8cc87", "indicator--1b239843-e28c-45c3-b590-35082b9a7290", "indicator--48854082-164e-4c14-bdd0-b50648b86a7b", "indicator--97777cb6-0ca3-440c-a88d-da1e0257c135", "indicator--ec9280c2-2475-4cae-8873-cc979c5963ff", "indicator--0e9a06ab-9e28-4a17-8a8c-936f6cac916f", "indicator--37ce8ca2-42cd-46c8-9f7f-15d08b098365", "indicator--5de85faa-5bab-44fa-9640-ee4d8c617c53", "indicator--30e9996e-f2bc-49be-9fc7-56f479892ec7", "indicator--3e7e6ee4-3ea5-4ca8-8f78-2bffdb9f6904", "indicator--0b47e3e0-0a55-4c10-92a4-7971fa8d2e9a", "indicator--79ebb9ce-112f-411d-8871-309d8710c0ef", "indicator--517fabad-f9d7-4b1d-b39f-4aef6dfa255d", "indicator--14d593fa-3422-4fab-8353-2c23d21b4de6", "indicator--86f47736-df44-4922-bcd5-2e3558816a6d", "indicator--d2543138-d9d9-4a13-955e-a589cf8d45da", "indicator--c5618f3e-c31c-4416-b9d1-60090a6611b6", "indicator--aee3c16c-7d50-4b9e-b384-8e99f7d10cf7", "indicator--ef2aceac-4c2f-4d36-a863-d73059af0b57", "indicator--603566be-1707-4bf2-85c9-05ce6d8f82ff", "indicator--8f148778-7051-4877-ac7d-a6d784c000f4", "indicator--ff03f6b9-3f75-4ab6-ae0c-69fc6a70b9ab", "indicator--dbd80f80-f8eb-43ef-bf18-f48fd3223e67", "indicator--fe4607e9-7fe8-4a96-b810-5e9f92cd8cda", "indicator--189dd3b2-7e80-469b-9b77-b7ddf61d9ffe", "indicator--ddceba51-4ae4-419d-90bb-75d704c557f6", "indicator--96405597-8903-4ec9-b850-6aa0707970d0", "indicator--cd072709-935d-476f-a80e-214eebd66de5", "indicator--de7ab05b-8d0f-4e50-8b02-5eabd42816d2", "indicator--8e6d13a2-48d2-40c5-af12-3de7edd1792a", "indicator--815fe718-a784-4523-a8f8-3d3f05ba4bff", "indicator--7d3fbdb3-3ddf-4e4a-905b-a800881f2f31", "indicator--f826246b-a78d-47cd-b9d1-062105011c04", "indicator--962eee93-3c67-48d7-9bcd-41d3953aef92", "indicator--3b5e1a13-2950-4e0c-a3f9-7768e33890e3", "indicator--007408a8-552e-4e62-9933-8b941be5111e", "indicator--0350c7aa-2ad0-4294-8603-0de5151201ba", "indicator--40de545e-77b2-4623-80e8-984550fdf421", "indicator--5b920e62-dba7-4412-9efd-666343f584b6", "indicator--01e7f144-e25e-45ec-9d8a-4300a0e9b026", "indicator--0b150f35-3942-47c7-9ae5-c1c36177dcf1", "indicator--7090a1d6-7005-46c7-9cc1-054ad2f705ed", "indicator--6a24725d-0d4d-426c-89fe-b2867a132939", "indicator--d71a2260-705b-42a4-996d-34c8f654eeee", "indicator--bd00e5cd-4fbb-4fca-9d6d-d071ef85e689", "indicator--a00408c6-e047-4e4b-8c0b-722e456432e0", "indicator--d1e9071a-2b76-452a-8c8e-ecfef1f482ba", "indicator--8900395e-6d74-4228-99b3-6ea43f2b0156", "indicator--e9d34249-8162-42b8-aca3-171f608830a5", "indicator--c4dcc945-84d5-4510-a04f-a4ec4f5e6e1f", "indicator--91c15136-9402-479a-a6ec-232104db84a1", "indicator--307a2002-5e05-47eb-8cb6-9571acd84bf6", "indicator--9e8b7a35-5591-4b01-bd0e-b15f03e5734b", "indicator--2196b698-2b5a-41d1-8392-cc3f17ad5201", "indicator--c29d62e1-a0af-4cfb-af13-ee8c7bf506c6", "indicator--ee97c66f-9d47-46c8-9c4d-d7824d3f9f5c", "indicator--1899727a-385f-40f6-bbc6-c741eb789aeb", "indicator--585e77d1-9577-4329-9e3a-010b04714560", "indicator--600a610f-ab8f-497e-b3af-4edb5bf542e1", "indicator--b3816737-8208-419d-a458-7d3e4abf26db", "indicator--4f149e84-e5e1-4829-aeb5-ba1e95624f49", "indicator--35d424dd-ad25-4f4f-bfec-84c7142d5c32", "indicator--63a02063-1de9-46ce-b88f-3f0d263592c1", "indicator--2c01152e-00ff-4aed-9e09-c0916e4dfc26", "indicator--adec7800-56f0-4e49-9b74-bb3ebf29a096", "indicator--f350201b-8be2-410c-a3e1-09e4e402c55a", "indicator--7161dae8-d44c-471d-9e2e-b28c5448447b", "indicator--8ebfad67-a20c-4c6d-b9aa-1bcb2584a8dc", "indicator--d6ee0fbb-15ed-41c5-b054-7095125b6ffa", "indicator--0641f544-998a-48f3-b699-b2e14fbbbc75", "indicator--518fb82a-0743-45af-91bb-5bbbef4e9de7", "indicator--3e199afa-b199-4520-8169-344e8e4bc6fa", "indicator--c036e1a1-3f90-4e05-ba05-d51d3fb86085", "indicator--1d3b01fb-3916-4189-8b66-2b88c9083ac5", "indicator--5e122c5b-0f3c-43d8-93fd-82f59410ebd2", "indicator--c3bde043-79e2-4c35-9c9f-f12fb6f2e36b", "indicator--16290933-76f5-46a0-9408-15a89d1c2c49", "indicator--306136cf-ae3b-4e0e-99c3-b54e8b248b0b", "indicator--6a6da3a9-4181-48c2-a40c-3d15757c03ac", "indicator--281de13b-6c12-4796-acaa-ed0e065ffa28", "indicator--92ef0134-e4f6-47bf-80e1-838fecaeaba7", "indicator--d8c615e5-ee6a-4d13-bb8f-d97054c01490", "indicator--1e6233ca-40af-43f6-b331-19fd042068f1", "indicator--f7a245b8-8a65-4278-a290-3a5dd446a515", "indicator--b5912b3e-1171-4f90-8997-a16ee17c8363", "indicator--c134f86a-b2d7-4131-8c90-72ebeb4284b3", "indicator--73e8faa1-465d-49db-95b6-0c6ea14ac2f8", "indicator--6fc4d927-9298-49e8-bb06-6e67ad24e130", "indicator--cd4674b0-f225-4fa1-b9ed-9d55d7acf0ec", "indicator--23fa93d1-e8b4-4a5f-bfe7-e903003d2dad", "indicator--677f0a3e-a741-4375-af36-cf2553147239", "indicator--94bf9acb-0efd-4009-9a95-3666d3e5f3fb", "indicator--e4450b6e-b323-4731-9b31-2b94d2eb0900", "indicator--75676cbb-22a3-42ad-921a-f68ef821aa4f", "indicator--fd3a6063-d1a0-421c-8f32-245a29a279c1", "indicator--a9ddd812-172e-4c14-b67f-0dd3761da0d6", "indicator--a04020ac-6264-4ef4-a49f-634b9063651a", "indicator--78ff8e14-c5cd-4271-8a7f-2867fa7b053b", "indicator--0feb878d-79cd-426f-964a-5e70ec59f557", "indicator--6d326db1-5120-4ff9-8dfa-8dbdc8ac2799", "indicator--545df5b4-72ae-46d6-832b-04b216035ef6", "indicator--b96e8d7c-6e8c-4db7-84fd-9e4196e80f8f", "indicator--ec735aaa-5a3e-419d-ba33-aae508835204", "indicator--7f5e87a1-518f-419a-a2e6-3abe5c937f59", "indicator--ab140b09-18cd-4ff0-bc3f-6f8e71a106b1", "indicator--b2764479-0ee1-404e-8b90-8ed41802ca77", "indicator--34673ab3-59bb-4df9-9c0a-566e79b14c1a", "indicator--942245d1-a8b4-4651-99b3-be5a947d06dd", "indicator--0edbd77b-95f1-4fb0-a895-d61edeb4162e", "indicator--1aebf703-63d6-4408-af54-0852c9b97523", "indicator--59c035ff-3f01-484b-bb7a-24fce3f2bae5", "indicator--781b189b-2fea-4b7f-95f7-08e686d9f8d9", "indicator--e55e7018-b776-48e7-a0be-432b0f8875de", "indicator--c549837e-ffe1-48f7-827f-e2a2f4e17ce6", "indicator--2749dc76-9cd5-4cb1-9385-acd6ffa5973f", "indicator--cad90c8d-e42a-4ffa-a321-9183cdf634db", "indicator--c00f5d88-6e9e-49ca-9365-b215c058833a", "indicator--26b49a31-a154-4c90-854b-2183d7765b90", "indicator--dd2a65d9-779a-4b70-8aa5-4baba9d87d54", "indicator--73b76078-f8be-4a6d-881e-a5021786777e", "indicator--cdee0e33-5856-4374-a1c8-045819f6b3bb", "indicator--1d8271bc-1359-4465-a3c1-9b01c0ea128c", "indicator--f68f6487-081e-486a-9e4f-a6877e7741b9", "indicator--9915d407-2648-4fa8-a578-85df65cc11d7", "indicator--69b48e8a-14a6-4d6b-9a04-81a8a72c8a11", "indicator--b670f8f8-08cc-4f34-a014-d73a7221d0d0", "indicator--24d6c7a6-d640-4214-8671-ac8453618cc0", "indicator--64cfd8b5-8101-499d-902a-f563a3e6f182", "indicator--45de48b1-1444-4d47-aad3-15feddffb363", "indicator--19f33bbf-3238-4c2c-a0df-c6b6331ff50c", "indicator--151b9599-fc18-4f57-9069-d53e7f5294d1", "indicator--5c0f7215-db87-40a3-9fc3-71a4fb18f041", "indicator--ab427837-ccd6-4553-8e05-320344492566", "indicator--4a272ea3-689f-4b01-a7db-cb521b3017f8", "indicator--a75022c2-cab3-47be-93bb-08b6f6da78a7", "indicator--cddf3f3b-db5b-4bef-80c1-5d72408d8baa", "indicator--f3b76f1d-08b9-4776-aa74-0073be2a132b", "indicator--7470281a-601c-46fd-8bd1-9f48dbd4a16b", "indicator--88b5b45c-af92-48d4-b4a6-748734a5ca99", "indicator--770d4455-4b51-43c5-b55b-985be065bc20", "indicator--ba7dd255-129d-41cc-8707-5b1b1e1a60b1", "indicator--d5dc0879-6d04-490f-b922-de6856e1204c", "indicator--fd249fc5-f94a-42c7-a63c-cb1d5a92c359", "indicator--9c9658eb-6d28-4140-8faf-88305a0ad4aa", "indicator--805618e1-ac54-4b9c-b733-6cf1189b4392", "indicator--4bcb9311-e27d-4d92-8007-08e67607c45c", "indicator--59e9e350-2a03-43a6-af87-329c66ff3772", "indicator--702db57d-0879-4b7f-b567-3bef71cd7d2f", "indicator--49fd8794-d648-4f8d-bce9-2e014e51bcd1", "indicator--11074983-3ee5-4934-8834-49e369e410c6", "indicator--fc5a8697-8132-455c-9be4-a21102364fca", "indicator--3dd1a85a-6b0c-488b-94ed-2645aadb2087", "indicator--d4b67f23-90f9-46dc-8d46-e21d63f15614", "indicator--02f4ca53-0440-499d-91f9-e7c5d4aa5622", "indicator--915ad62d-e9fc-4f58-bb0a-d3e0c18eee2d", "indicator--721acb68-9440-4f71-a78b-a22e907725fb", "indicator--f132f8f7-88a0-4aea-9348-fc0f3c3c4e62", "indicator--c60bff42-f5d7-4ef1-87aa-217c1f6e8c34", "indicator--11ae0ba5-9b27-4e2d-9ba7-adf2129989ef", "indicator--d539ee8d-7179-4da8-a782-4e507eea0f70", "indicator--d4552a3f-6cc4-4268-9208-ef492bc747e3", "indicator--fc6700be-2d59-42cc-9aaa-c44a762d171a", "indicator--bbc34f7d-5307-4d98-aaff-8a29fdb3f2f1", "indicator--8e1b59e1-c162-473a-a091-e7c0a664daa4", "indicator--2e3e3dc9-03d1-4df9-a83c-c979019b18a4", "indicator--138b7393-7e9d-462c-9fa2-76d0000999bd", "indicator--6497cd99-1fd4-4d66-bc44-d884363d4f48", "indicator--19fc4f56-8cb9-4e92-900f-3ca16186aa57", "indicator--9a7be0c9-6b74-4326-9a24-419729ccc6b5", "indicator--1720f40b-6916-4875-b157-c9203d8b80c1", "indicator--dfd5513c-ab61-49c6-ac06-005c83bfdb86", "indicator--dae4c203-14e9-461e-bf0c-95683c6ec2b1", "indicator--43b40b2d-a867-4c9c-8a73-50feee658ec1", "indicator--3ebcd007-2546-489c-97de-ab2553307127", "indicator--41019b49-973b-40c7-b8e8-87d698d7bd8c", "indicator--f77d093b-f8bb-4221-bee8-fe8c2531ee3d", "indicator--8d4e921b-c57c-4af6-95a0-baf514b6dcbc", "indicator--01e3234f-1537-4625-b414-9b79f755d390", "indicator--3f52fcbd-51d5-4452-bb60-679667566a6a", "indicator--9604a39c-dfc0-48da-bcee-b546be966e3b", "indicator--3c941ca7-c5cf-4535-bf9a-669dfd976151", "indicator--db4f6516-6ae2-4540-bfd5-0b08d295c020", "indicator--a2fa0c92-e71e-45b2-a237-3d078c32de6f", "indicator--ec5b1998-b553-48d6-915a-c7a56edf7058", "indicator--75d61fbb-1e0e-4f5f-84d4-834d62717294", "indicator--92db9978-93a9-4bad-a6d2-72906f30897a", "indicator--1586a698-cd8b-44db-b1b8-b4509fb046ba", "indicator--402dc1a2-e40a-448c-89e4-868554fee383", "indicator--bd2c7d3a-d73b-404c-826a-1ff980913bc6", "indicator--c1867e52-b998-4f5c-a84f-d3be88cc3b7d", "indicator--37392ffe-f12d-4379-a284-d9521900b89c", "indicator--3a77ae33-5c36-427b-bdcc-93440b8c468c", "indicator--15bd7454-163e-4a9b-927e-d00adb3bf596", "indicator--079a39da-a9f5-43e4-b921-e779106dbab6", "indicator--8d47420b-a009-429c-bc90-921680beb588", "indicator--af2d73e4-1b9b-43eb-9682-c1c76ef98b13", "indicator--1d6a534f-1969-4d1c-849d-8b48a1424467", "indicator--9aeef704-78d0-45bb-bc60-4645ebd7841a", "indicator--c8d39f70-14f1-467e-853e-b497dfffbd12", "indicator--45163483-d4b0-40ae-85fc-b4f0fc830c3c", "indicator--97f8da95-0383-4159-b01a-b97d4e7d4e3f", "indicator--d166f0a2-f375-4ec6-ab77-a7c48720c6a9", "indicator--983fed88-7e65-417c-b1f2-9c2e2510cd26", "indicator--eb0a9d87-03a4-4ce8-8082-2d4f6a97b1ef", "indicator--7fbd233f-9f98-443b-b2f5-7f97f30776b6", "indicator--0ba1b4dd-f7f7-4146-926c-6caf1a6b48f4", "indicator--6fba609c-1197-4d91-9b07-8f339267aac7", "indicator--81a5f755-1041-4aef-bc97-9c9a99af0a5e", "indicator--55d75ee8-badf-4819-8f99-590eebab4e1a", "indicator--2b6bc141-18a6-4138-960b-710df1eef07c", "indicator--5fe15685-2f6c-4ba0-bb66-c89d7539a314", "indicator--2bb219b4-dd6f-4e0c-aa8d-64276a39b1f7", "indicator--909bcac9-60f6-4387-92b6-f0dbb3d1f518", "indicator--157925b5-c15b-443e-8b07-54a349eb49ef", "indicator--18f46ed6-e9a5-4b63-b151-4d695928d434", "indicator--1f0c49dd-7c5d-499b-a9fb-6e0741826050", "indicator--34a03cc6-7632-483b-9f26-1d291292c988", "indicator--8f49fdd1-8e99-43ee-bd6b-a6042a5019a9", "indicator--629505cb-2a17-4411-a898-c2486bf63736", "indicator--0a84bb2a-970d-4866-9232-137accd74b29", "indicator--e28b323c-cd4b-4c60-9981-0e4b5c833e18", "indicator--6f3ba6e3-f145-4a0d-b7fe-3df47263408c", "indicator--0d06938e-2a06-4ec8-a6fb-055424b97312", "indicator--6397a209-e146-4d9b-9682-e0006e7d0950", "indicator--d4e0465e-72f3-485a-ace5-29477ab0ca98", "indicator--3e5d2fe2-099d-4810-9f9b-7ff60dc9a348", "indicator--47ebd85b-2ee7-416b-b161-7514dfe55079", "indicator--f623a310-0bf4-4a57-9877-9be830e1785b", "indicator--d36e3345-2706-41a5-b876-a0b58a364c23", "indicator--096a9b1b-a0ff-4b74-b865-65c04ecea53f", "indicator--872993fb-3210-45f5-877f-7678b9a2eddb", "indicator--982a36ef-9d8d-4758-a613-3fe91f6bc773", "indicator--dd5038e3-4474-40ac-80c8-64dd3efa2137", "indicator--986769f2-2418-4d21-b92e-5d824abe5f7e", "indicator--3bb894c0-f759-4055-8d8b-2d74e0be61e8", "indicator--99b6ec3f-23ff-48af-9360-ce2e55f19914", "indicator--ee008da4-4edc-4c51-a187-3cee1ef12b36", "relationship--d547d0d7-d2be-4b98-be4b-28e835600d75", "indicator--9847d270-fc11-42f4-a295-47809bd48b93", "indicator--56b44343-2bb4-402d-9b4e-82aa3e273d1f", "indicator--29e2c431-20e1-437b-a8a1-3966966ea807", "indicator--c5eaa335-87c9-46bd-a110-68bfb55db25d", "indicator--0fbf46f1-19ea-48fd-b313-5b3191fdc864", "indicator--5dacb87c-974b-4fde-9531-5e2b70ab40ff", "indicator--bad0ea1c-092d-448d-a641-0a19817184e5", "indicator--fe27dc45-0939-41d9-bc32-d9491527a4e0", "indicator--728ba4ea-de7c-4440-acd1-59d0e98b24bf", "indicator--a74c3677-712a-467f-a9ec-d33866e6e759", "indicator--bb37fac5-a6b4-4c9e-b9fc-7539a0dd4cf0", "indicator--c1c451a0-8a72-4c1b-a393-fe0637e8e83c", "indicator--14f57d24-5ad2-4b7a-9151-c3c417463eca", "indicator--8b2e2740-a9d7-4965-b29d-f14c489cfa64", "indicator--5d833b33-a05a-4c3f-bdc7-501587850709", "indicator--36a64a46-0469-4b9a-bea7-8a2227db0e5d", "indicator--c33283ee-4ee8-4a0c-954b-0cdd13a0fbd5", "indicator--54614e95-df7f-4a52-869a-e9314ace1f3c", "indicator--2dd639ff-a484-43a0-9b14-63fb2cf8dc6d", "indicator--7f2d5833-e39b-462d-ab51-7e9d73e02c89", "indicator--6ddc3aa8-5450-4ead-a5f4-19a9ad453701", "indicator--c2563028-1639-4d59-8ac4-2beb307285c7", "indicator--8188e5fa-a95e-46fe-9e18-424c1e708e35", "indicator--955e1007-40ff-4c6f-8013-839a9f5405e1", "indicator--54a74bd9-a769-4eda-9531-3cf567378eba", "indicator--aa3e75ff-f50d-4f63-b4cd-e30973c60078", "indicator--fafd2522-0f78-45d2-98e1-ca72f6ebcd0f", "indicator--bed489ac-1487-4e6b-bdd4-bdf15c3d6d7b", "indicator--f5646564-ac46-4ac0-9126-dbf8aaefbcf3", "indicator--e0d3bc71-5ef7-42f9-9c4a-6e9128484da6", "indicator--e1254099-3e58-4cef-a033-dde7679e3969", "indicator--eac19637-c967-4f64-8026-405fc4c81907", "indicator--abb03607-cc1d-4f82-aacf-48e4006e7aa8", "indicator--9b0e206f-e461-4f77-bd3f-00551722461b", "indicator--32e4ea44-49da-46a0-bc04-a9204cc39653", "indicator--c16f29f7-fa0c-4f36-8980-d5b2494987d9", "indicator--c0eebae1-384a-4db1-8c2d-c950a1a5cb5c", "indicator--3bcac0a0-326a-4c78-a17a-3f334aa91b30", "indicator--3b96f0a5-229f-4754-beba-b3d1feb1fdb6", "indicator--8033bb82-8396-4108-9ec2-d17f31f7ecd8", "indicator--0046e53b-bef1-426a-bef1-da56c0d398e5", "indicator--579d9b0a-375c-4f8f-9148-10c15cde7bd3", "indicator--d67c4fb4-213f-4c44-9172-574cc7acc414", "indicator--fe68f6d4-bfae-4cf5-ae05-538be3ada60d", "indicator--6633b8e4-91be-4674-9c81-5285c5de8752", "indicator--3f275c64-42de-4bd8-a740-ebb538215856", "indicator--4db76b42-e344-4fa1-b9e9-1caaf17e4611", "indicator--4e17cbca-93a8-4b87-aef5-e5cf22ef2b17", "indicator--fc8dc4d7-1f49-4888-b4b1-c443b88e7ab7", "indicator--b9eee193-0a21-4881-b618-f2e441c27f61", "indicator--cdc8c6b4-1bd0-4945-b6ee-5def30b19506", "indicator--bf414f3c-60dc-4926-b18b-d22240d7ea17", "indicator--21a30bfc-9bb3-4ed4-aeb9-b1bc00625540", "indicator--923ef960-8707-4ecf-8c0c-5107e61fd313", "indicator--4662b8db-d577-4120-9555-3a17a028f49f", "indicator--c75ca4dd-a9a0-44dd-a4d4-75eaeaaf07e7", "indicator--9248f6f0-6f91-45a8-ac36-7e0b0a642d9c", "indicator--bbf98c65-765b-4481-9df9-aa1049030f12", "indicator--787d7286-edc6-4e14-ba80-f3da307e5451", "indicator--16a9eb98-b77b-4c0b-a7cc-7c214f4cf4ca", "indicator--efd2bf08-f43d-42f8-888e-be246b2c840c", "indicator--739f61f7-0d6b-4f75-b8ec-5b447293f0b7", "indicator--423860db-2d98-42f5-87df-2ca3f836cb0c", "indicator--c1f9db72-abd5-435f-93ef-74b8b2681511", "indicator--814955a9-7c64-466e-bad0-b4f46518386c", "indicator--a393ffd1-b3c1-4aa1-a128-10cf6a9a1407", "indicator--0d5d39de-c415-4662-9a18-19ff10f772fb", "indicator--b7dff1e0-1c4e-44fe-be4c-0d5d5ccd1bd1", "indicator--876a792a-b989-4010-8fc1-1ee152a24931", "indicator--ab56a0c7-1fad-434d-9b14-ed698a1eb52a", "indicator--80862c45-2a7d-4c84-a114-3481929e34f4", "indicator--289428d1-6073-4cc6-82ae-f6b1f5f752e5", "indicator--3f3cd2b2-8ff3-4122-ba01-e4dfa3d20613", "indicator--f43a7ec1-1157-41cf-9182-9f5342cf2c7c", "indicator--97985ac3-5615-49d6-8dcc-13c47ce46f87", "indicator--967b18af-c166-4fd9-bee1-df9a74958394", "indicator--ee8fe9d1-6375-4659-a39d-ccec1c028c17", "indicator--640f1071-4ddc-4cb2-a43f-8ee45c84e050", "indicator--129b4ffa-af9b-4f1c-8dd2-bb7e470ab832", "indicator--33d79f1a-365d-43f0-9f0a-3dd779dd3a42", "indicator--1da4eb5a-e823-4d27-a6bb-d7090d56470a", "indicator--317836ff-131b-4c2b-9514-7ebcd01d9f7f", "indicator--e1dec842-73ee-4579-bde1-7c77d473eb7d", "indicator--82865ae8-2565-4d12-9891-c947daf3776e", "indicator--946cc4fb-eb48-4781-ae9b-071b66b05efe", "indicator--27695a86-a018-41cc-b1a7-76b18525fdef", "indicator--7545a0fc-b3c5-49d4-b106-72150ce16aaf", "indicator--3921af93-ca96-4a84-904f-c8d9d89f40e3", "indicator--4d7ca00f-827a-4624-8c01-32f30d146873", "indicator--5c42e4b2-4c7d-48b1-bad1-76e4368f8c9d", "indicator--6794c711-4cf1-4a1f-ab91-ddf625fc1dbe", "indicator--ae50cd88-5090-4a72-a26a-1e89a9ed2b2a", "indicator--0f1b2749-1fad-46c0-a9c0-4bb5ece3b9a3", "indicator--7d8fbe2c-2d94-49f2-8166-e6f79ac84443", "indicator--288ebf56-4cc6-4cd7-84e6-e934d4056db0", "indicator--cbfc6147-5564-4169-83a7-7510dc7508a8", "indicator--8b0be92a-8e73-447b-b9b7-1ad4ced866a1", "indicator--834d828b-cb4c-4aef-b258-476add9bfb2b", "indicator--c33243e6-f511-444a-ae8c-1da57ff17821", "indicator--d2f66636-f1a7-4214-9a91-f10b7b264f30", "indicator--78673cf7-ac4e-4109-bf69-1c0942208154", "indicator--df013b17-c632-4165-968f-b37ec377363d", "indicator--15926366-b580-4b85-aeda-826ce621773c", "indicator--1d2ddf16-0b0b-41bf-9b88-4699429cb866", "indicator--5abb71c5-abc7-4e1e-911f-de1d8e092fe2", "indicator--42fc6f2f-ec49-4d88-9197-a1c6cecc522e", "indicator--a2a69de9-eff8-414d-b5f0-0d2b7a776bf6", "indicator--1c75a9f7-ab55-48ec-9d8d-6e1bf33347a4", "indicator--f039ca91-c4c3-4809-9432-8c4887ea08f8", "indicator--48c888b9-d987-4589-bcb9-3c6659e3c49c", "indicator--e09ee81b-d668-4e4a-a5a0-8e1c12af4080", "indicator--7ef08355-cb33-4a35-a86b-46b348d94442", "indicator--8016f7d6-a98d-4af1-89b1-50fb9aba9ecb", "indicator--6fa13bc2-ea18-4d83-aaa3-5d224ef51cf8", "indicator--9732d442-39e9-4334-b798-035fb6c3a767", "indicator--d33c5d78-1d6f-4de2-a628-6dfc83d65837", "indicator--2e8bb40c-35f4-46fa-9955-dcbe349349ca", "indicator--02e329de-1cb1-4d89-b9f3-84ce0bd7ef0c", "indicator--d832915d-7206-49e2-b921-80cb6b7188b3", "indicator--649266a2-f009-40ad-9330-a88241b57d83", "indicator--9364aaa8-b6e0-4dd9-9720-9bbd091b46f4", "indicator--50d4dfb9-be7c-4919-b007-077c9207276d", "indicator--ef51fac8-a74b-43b0-a348-4c229983906b", "indicator--a8a74a4a-ed70-442a-9476-d9a98df544ba", "indicator--9be8cca9-d0ea-4316-a93f-828cb2da111d", "indicator--b68b8f75-11b4-4f25-8aa2-28ad95990b17", "indicator--e25bd9a0-20e5-4847-bd2d-d2b97c449f59", "indicator--e45c4b0d-0aed-4b2b-8d13-fe5cd3834207", "indicator--be1215a1-8b90-4f22-905b-56e00231999f", "indicator--5b6af8cf-a62a-4b91-8dbe-33c27f08b13e", "indicator--ff157329-d2ce-4fc0-b7b5-d6b1623153f6", "indicator--c3852cf1-b619-436c-8a20-c594110f940f", "indicator--60d53484-f690-447b-b229-3c387b943328", "indicator--6409ddc3-432d-4831-8a36-cc325ae00ae2", "indicator--0d76d446-860d-4692-ad60-426f6f49ba4b", "indicator--e6ca3770-5b3c-46b8-9e13-c2e722319226", "indicator--4ab5f4b5-1a26-4611-94fe-1d384ddc1c86", "indicator--a923bd15-bfe3-46a8-b38a-1d2f3951228c", "indicator--d23914c9-aeda-4246-a7d1-ad3af95225e0", "indicator--c31ea5c9-f4af-47b6-8d13-12faff71292e", "indicator--20e59d51-3f14-491b-8bb1-d2f22f46d958", "indicator--b28e3e5a-00fd-40e1-bd1c-79dab24cc92a", "indicator--2152a182-6b76-4975-8803-2824656f6e43", "indicator--a017470d-c320-49c4-bae0-3fab21926ac8", "indicator--bde6c6f1-8ae4-479b-9f50-73fba4982253", "indicator--82d774f2-59b7-46a0-95ae-ecae1a500251", "indicator--676b3664-d209-4111-bcee-97c5dbd4fe43", "indicator--6267ac0d-d0e7-4bfd-85b8-d91e6ecb7ab0", "indicator--d6e8beff-35ca-4f43-ab11-e7acd2957cd2", "indicator--3838573f-2b84-499a-ade4-57451acba19f", "indicator--a1be41cb-2d97-4899-ac3f-e22e67d864dc", "indicator--09d06fec-8f92-4084-9f7f-2d4869ae6eb0", "indicator--32be650f-f6a4-4ddb-9d7d-ec9faac82682", "indicator--97692e4a-b6f1-4e1c-806f-31c9b22f4f34", "indicator--fca2fd5d-e9bc-43c2-9c2f-2b16e95efade", "indicator--49695638-f47b-41b9-97ae-978adac0bdb0", "indicator--52dc2ded-d155-4453-b594-0863abea311e", "indicator--b10e2d27-59f8-494f-90e4-2e10e40a9c70", "indicator--ee02db19-f3f6-4e56-a46d-8c49572a8dea", "indicator--42edfd39-f496-48dd-8bb4-88cad4f967ce", "indicator--4e86d968-394f-4fd3-846b-76a74b96a2d3", "indicator--228456fc-2ca9-4d09-8198-fe0fb7da9de7", "indicator--822bf037-2d14-42b5-93e0-172220bf6668", "indicator--7491da2f-6fbc-4e0f-af11-c131cf85107a", "indicator--435800cb-f660-4aca-8db7-a229d890c9c1", "indicator--d2422b75-faba-4a5b-9596-f9c80bb956d8", "indicator--73e34efc-5973-4b9c-b18e-ce8162f513b7", "indicator--77711730-a7cc-43d3-9279-391cf202e510", "indicator--f557649a-30a5-4c20-81fb-0dd4b1e914ab", "indicator--494b6685-600d-48f5-8a26-7e320e547ce3", "indicator--74fbda10-3f32-4e74-b49b-d5db10e37dbc", "indicator--347afa20-6861-4700-a3b1-8d174dd710e4", "indicator--dc88fb94-fccd-49f4-b552-99cebf5502b3", "indicator--d858b85d-0feb-4229-a323-c658d3647ff7", "indicator--ed9d7f55-e9b3-4ff2-b88f-df055ef02162", "indicator--38cb8bcd-0b92-4513-a9fd-813896ec355a", "indicator--dd9b1a6c-fbe3-42cb-8710-7d58ff755297", "indicator--8cafa35a-8007-42f2-81d9-f74ac560af5f", "indicator--4112c3fb-4f0a-4b41-bf84-11b0c13c5398", "indicator--a0ce9acd-e7ce-4ee6-9ea9-0ace76a3305d", "indicator--2094a5e5-e2ff-42b3-a3c4-1e7926c845da", "indicator--e1447a8e-72fa-4627-b624-f2ef3d3efc75", "indicator--a2e852fd-8cb1-4683-b33b-9d69ced47651", "indicator--86bb05ad-b74a-41b4-8e6a-2ce4c4ad1e54", "indicator--f17a0683-0280-475b-9a13-53ad6b64c5a4", "indicator--da60b588-b194-4d89-aa78-e8ade713f1f7", "indicator--47439fd9-58c5-41cd-af48-16611a4d7bf6", "indicator--1b145333-d97f-4799-b833-e3ff2ed19b30", "indicator--dfe4a88f-1e4a-4cc5-abf5-87da62421f62", "indicator--91b4e94b-36a7-4160-8544-2af13fb135a5", "indicator--86da853f-31c8-4dcd-b0e5-0137231a50f6", "indicator--295fdf7f-d2c7-4e30-991a-6cdf9afda17d", "indicator--3e52fa80-a3a9-4bac-a3f5-73c0af3963d5", "indicator--77bb4bb4-770f-4bed-8d7d-807ad5a616ee", "indicator--8f63461d-c585-43a1-b7f5-032ae346ba7c", "indicator--ef554f6d-ce98-430f-961c-8c019120f013", "indicator--e30c299a-22bb-4794-8d68-8658946020d7", "indicator--f1ea6334-4496-4ebf-b817-c59e8d95886d", "indicator--daad9af6-8073-41fd-b390-60a0def9c0d8", "indicator--24e1f78a-3266-4b82-85df-5ce99b8df63d", "indicator--938d36d9-facf-42e6-a245-145a6875d918", "indicator--04586405-8656-4b5d-92fd-5ec44a2232ad", "indicator--4d8db63c-4167-42aa-aab0-b9ba0d05a642", "indicator--e256c6c7-62b3-4f35-bfc7-06b18283c778", "indicator--0f93ef17-f330-43e9-8227-bc080250dec3", "indicator--ca58e259-0381-4d23-a903-52e521a847a3", "indicator--31067096-093a-4e25-9f1d-131ae258512e", "indicator--720e9258-c952-4f7f-8cae-39545789ce3c", "indicator--2c0ff696-2445-4215-a576-de817b0ff9f0", "indicator--a2ca8c18-e10a-430e-8db8-59da6be01d28", "indicator--e0caba09-2c2d-4a94-bb5b-ea4b3a235300", "indicator--b22d42bf-c13e-4a8d-878a-770872b076cb", "indicator--b48216a7-c0e0-4357-b892-6126d8b2ec23", "indicator--5d81c7d2-db98-40e0-9756-f2b247f31aab", "indicator--27b2a1b1-f272-43a5-9fd0-360cec363ae6", "indicator--4ec5bc13-89ce-4b52-abef-ee820f8f04ad", "indicator--0349135d-0420-4959-8f2f-971986b12e2a", "indicator--5d4ae3eb-d787-4550-a377-748d3ce5b18e", "indicator--17e7f1ca-dc00-4439-8f9c-3394d7746da5", "indicator--d4260c3b-d840-4b19-9074-4d9ea07d81c8", "indicator--521760fe-219c-4c2e-8eba-217d4f6c390d", "indicator--56973c60-0771-46b2-a320-b7d6ad07fa7b", "indicator--91509c49-8deb-425c-8d51-1d15e7517f15", "indicator--be5c9b7e-6873-491f-9a9d-f2990633d66f", "indicator--0ee4f9b6-f5f7-4f4e-971b-ac7446111d75", "indicator--7e89ca3f-e748-40f7-83db-53e199a2d8ed", "indicator--66ca812c-17b9-4275-81e5-19931ce57b50", "indicator--e86cd366-fd35-4dfa-8895-304b516d129e", "indicator--cc5ca465-3f63-4c5c-8d56-52229709b5fe", "indicator--fbbc19af-9040-4dcc-a28f-cd04747bcfd3", "indicator--7d70441b-c810-4908-903c-fd37486f5bbf", "indicator--79b48466-5c77-4621-ad74-80052c94d3ca", "indicator--0a0e44f3-df01-433e-a0f7-8b45ab010a25", "indicator--ffffe6f1-7f51-433f-84db-931cedbaaa8c", "indicator--e60ec1ef-a876-484b-aefa-a7dd5e96a94a", "indicator--202959ef-a11b-4937-9ed7-40da9cfb003b", "indicator--fe09b11e-211c-4b23-bfc0-ac0b2eb7075f", "indicator--a7d151b0-1edf-40e5-885e-5a791555f3e0", "indicator--4554b5e1-7e55-48ae-824a-ba78f405921f", "indicator--ba96074e-d3da-4a21-96e7-5ef3ddde354b", "indicator--2ecf7231-2030-413c-a0eb-064fb8f88886", "indicator--f65e7755-9f34-4a89-88c9-b9270b08e258", "indicator--889b86fb-5156-481e-838d-065b1a885f2c", "indicator--531f73c0-448b-4345-82b3-1d6e21909946", "indicator--dd543bef-388f-481b-bb6a-11e36a62f7f6", "indicator--fe226404-9f5d-4323-9c6f-5b28944de06e", "indicator--d250aac9-3b5c-4958-8fc0-2fd2c3c859a7", "indicator--f5d787c3-a5b2-4dff-b366-80e945e43873", "indicator--f93d7309-aa96-46e2-9f1e-971681924793", "indicator--c517ef38-2ab3-42fb-b1fe-b266342581a6", "indicator--e2a44c9a-4000-4e15-b35e-4c4daff37339", "indicator--9462140a-5ad8-44e1-9c80-f2b30282b8cf", "indicator--91d18acb-f637-4545-afb0-79a9c3f98669", "indicator--b5393fef-6703-45c4-875b-06de25df417b", "indicator--740f1b39-1f5a-48b0-9f99-04323848d1a2", "indicator--87712599-5e72-40fa-92f3-7b9784d83c0f", "indicator--7ffa7af2-945b-4974-ad6a-1ddff962447d", "indicator--b09c2274-314f-43ca-aa10-0c436d8e6e62", "indicator--8e9b4205-1646-4ed7-94db-b700aa3dfb14", "indicator--1350d3bd-de0d-424d-bd55-33641a7dee8f", "indicator--80d27b26-7a3a-40d5-a4df-d390e64a93e5", "indicator--81ab441f-e3a8-43d8-b229-f0becd2b8006", "indicator--ce5a7333-13e0-4188-8f58-f46a04086b84", "indicator--c4e45844-e745-4698-8d7a-b17bd051a6c6", "indicator--f100d0aa-4aff-4621-8790-e3aa26a4d416", "indicator--17617b47-da98-486c-ac46-660060a36220", "indicator--4a973b51-2411-4035-8f74-af32ce37ede1", "indicator--c3359635-88a9-4616-817e-875e2c34b5f4", "indicator--5ba2d0ca-3765-4b57-a289-0eaece8fbf22", "indicator--a17b2b9b-ee16-4aed-b706-bf1af6188c68", "indicator--89e6fbeb-881a-44b4-a4a4-f8ba78b39222", "indicator--06edda2b-4a11-4069-a289-3909b4bc6ae0", "indicator--59b1905a-a751-4ddc-9d94-052cfbf0d75b", "indicator--32dcb14c-ef76-4308-b98f-0d0170a8a207", "indicator--434934d8-6650-4344-9072-653e2a0a3fe2", "indicator--6c8628ac-f226-4159-9df0-567e51b412b3", "indicator--a10321c6-2ae7-490d-9e29-ed068a2fc35d", "indicator--9ff93835-b447-4df7-bcbf-d643d095d87f", "indicator--c0d93741-42bd-4ebf-a004-a260babb5904", "indicator--e674b295-98b8-4669-b1c5-783044f8b276", "indicator--58cd0a9f-e540-45d8-a2aa-72073c2168cc", "indicator--590831d9-2fa5-41a1-9888-021c51770749", "indicator--4e5f4264-b480-4df5-8316-a42a4061b844", "indicator--ec52eddf-69ed-427f-81c1-7d98b4d91193", "indicator--b205c44b-e9c4-4cdc-8eef-615ebfb12076", "indicator--fe258155-602b-4e43-97b8-d7c86c2d8b75", "indicator--4edb630a-0a10-4c2b-9d2b-f993da289e3e", "indicator--de7ab294-83ca-444c-aade-034512af12f6", "indicator--8582bb91-317f-40e6-808d-1b6ab2c54b18", "indicator--a566474c-2694-491b-8b44-d863cb05d2f1", "indicator--3319f39f-265d-4822-8a01-2ff99434fdaf", "indicator--735f3391-a279-45d3-8893-bb9b9ad66948", "indicator--230b43bf-0495-4b4f-83a8-7e5feb8aebb7", "indicator--ec2c0ff6-470f-4a9f-8fc0-4d6328c839f0", "indicator--7c22e3e8-31bd-404b-85bc-68be0528bd1e", "indicator--bdceb062-220e-4473-9061-ecce44fd2747", "indicator--7bfa8b1d-5552-4522-85e8-1945bf16859b", "indicator--a4445e87-8864-4fd1-b3e2-56f6c17147d9", "indicator--eb9dc0f0-180d-4300-9cb8-23468f774735", "indicator--625b9999-e440-4dc0-9094-f6519f321b79", "indicator--75a9ed37-025a-4311-83f3-5b13e60c2144", "indicator--9ed0183b-be81-441e-9fb6-af1d26a16e6f", "indicator--e8e495ba-4c95-4d84-a6c2-db3bcba0e1a4", "indicator--10d66586-2264-468a-8574-ad9486bed7b2", "indicator--81bfbcde-1f34-4e04-b8d0-c70e2017c1cc", "indicator--dd9022f2-c07b-40e4-a7af-65f7674ed4d1", "indicator--b5aa1fa5-b084-44cf-8e27-7e24bae30adc", "indicator--d8f255f1-b83a-4f9a-bdc4-e9be748d459a", "indicator--02534257-e284-4b19-809c-6daf221fd225", "indicator--9498b0eb-a478-46df-aedb-8ec8266fe57b", "indicator--116f4c6e-6798-40bd-a2be-a3dbd75c6da7", "indicator--3b7e12e8-5b65-4858-967f-4e1460a6a03f", "indicator--53b981c0-17d1-4887-843a-57287c8d3815", "indicator--c886c894-6686-43cd-804c-3832cbc0ec36", "indicator--f687272f-0bcf-4e0d-969c-66e41da30a74", "indicator--14e068c3-25b7-4fb1-b37d-507c41433c9a", "indicator--b95bb6f8-0744-46f8-90a9-1671715c6353", "indicator--200bc71c-cd12-421d-a899-65cca8490a26", "indicator--7c747bbf-2148-4ec3-97ed-30e65c18112d", "indicator--31ac6153-bbae-4622-804d-520370b88fc6", "indicator--208782a5-3efc-45f5-a8ff-071edbc6f04b", "indicator--38b24abb-a2b3-444d-882f-06ae05dd564b", "indicator--356bd15a-6112-4338-b2a3-1bb41ad726b1", "indicator--f52fb403-1658-4ad3-9aa0-3331479df0f6", "indicator--9b091589-3770-4037-b3a6-385bafedd7f3", "indicator--42975188-36ab-4ed8-8252-f161fd733245", "indicator--8aa5deab-8267-4fb2-95c2-c2ee1428e959", "indicator--cc2859b3-56b7-405b-846b-0da3a6b796f3", "indicator--9a2542e4-9685-4c99-b189-66c4afb075bc", "indicator--51e439b1-7f01-4777-aff6-0e26ac10f241", "indicator--f61e2f1d-2066-4491-b6a0-275ccd7f37ca", "indicator--f8950a22-424c-45a9-9011-889c01e6c806", "indicator--70942ba5-bc88-4985-9e69-bb8d1b3f20a7", "indicator--672fd266-7f79-48f8-858e-42da8b8c41db", "indicator--4cae9afa-9c0e-4c1a-8f69-a3b9e0746719", "indicator--59c1b8db-581a-426d-999d-340bbfbc8f19", "indicator--abe18687-ff6a-4ffa-9512-c92f9cb5013e", "indicator--c4e67a21-267e-4145-bc1c-056f987617c3", "indicator--3e073813-5484-4395-9446-90ae87c44796", "indicator--c4bebb12-726c-43a6-9954-15bdc5267825", "indicator--83a5103c-c832-48b8-9c86-d14be0762866", "indicator--607635bb-893f-4262-80ac-0432ee0a22ac", "indicator--ced7d73b-d094-4d55-905d-e16efacf62b5", "indicator--903e49b0-9530-4c91-8d80-9986b291d807", "indicator--e5ef6fe2-9f3a-46d2-8269-33d88bb8122b", "indicator--a7d14739-a1c3-4f71-9594-f75811e61c03", "indicator--b2e63e3b-ea5e-4cb1-a02c-fb980751f7cc", "indicator--b37baf24-54dd-449f-bbc6-ea6b54a95e1a", "indicator--3bde50ab-0a68-4ec8-84ba-bf72ebf9657e", "indicator--e5c82c13-982e-4a95-9694-f25d82507820", "indicator--1d648375-1669-4f28-abfb-85c73df441aa", "indicator--fb4fdedb-aa37-4607-bcaf-f59e1ffeb5a0", "indicator--47b3c692-fbe3-4f21-adf6-a163a872a736", "indicator--36232c03-028f-4741-8c71-df0c8704719c", "indicator--792923ee-1a08-4c13-b2dc-cca83e3b39ae", "indicator--ec9ef842-5bca-4ebf-bd7b-8bb3fdaee8bf", "indicator--2277e4c7-8a61-4ce0-80be-77a62c1a3f66", "indicator--c380b54e-8c81-4e66-b720-1ed18bc1f7aa", "indicator--1ba94c67-0064-4ede-8ee1-ae8b71f1b7bc", "indicator--48b5632d-c90e-4f5f-a3c4-7c38c32bffc0", "indicator--c4d1f4e9-a5fc-46cc-a8bb-ed98f8e80c29", "indicator--a674ff1e-1c70-434f-b6b4-f31ac3515c7c", "indicator--5e5ba4fb-29a4-46c8-94e8-2f34cd604b1e", "indicator--9de1f68b-ffb5-414a-8cfd-d8c911bcd470", "indicator--14dab68f-abea-44af-ab27-b165cc5b2a13", "indicator--06a11af5-2986-4121-a63f-0e8da22060c3", "indicator--10cba697-78d1-437a-a6c9-85674296175a", "indicator--3a14a9d9-ac2d-4e46-87b5-0648b0207040", "indicator--74e0f1fe-040b-4655-8035-11c92e545a48", "indicator--9ca72db8-be58-4dd3-a097-3b2c683cef28", "indicator--fc726fd9-f5cb-4a00-8eb2-1bd9db95eccb", "indicator--6c6503e9-7365-4532-87d8-0b72ce572e9b", "indicator--e0501911-1366-4f5f-8791-cd0871e24268", "indicator--6a5d0016-3661-41a7-bef3-9337629de096", "indicator--49e90417-9a92-4eea-a208-66795db4a80b", "indicator--c2d7c06e-6123-4f98-95c6-ca0b9af98abe", "indicator--0cdb3fa2-1625-407a-b0c8-9701b562e866", "indicator--752f9f3b-1341-46ed-ade2-2db129a0955f", "indicator--8af32d9b-2df2-412a-b44a-69f95078080f", "indicator--b21fd1a7-8fc4-4cd3-ba85-56a7420c75b6", "indicator--f61f910d-032d-4c69-bb1d-0f91116fb162", "indicator--80661f45-3866-468a-a314-caf9f1ca07e3", "indicator--33a6f037-5962-45fc-9e1e-9ce172ade45d", "indicator--d3f7c5d3-d8a9-494d-b6ec-5d45c571c33b", "indicator--18747f6b-3bf0-469b-9a7b-aa0be3564387", "indicator--c3830c9f-2cf5-4f99-aa83-ef794ce07207", "indicator--09c44bdf-10e8-4296-8e4d-73da621b1296", "indicator--0051a29c-8113-46e7-b975-18a755cff7d2", "indicator--52abcea5-52d2-4f02-85cc-4c90812db9ce", "indicator--f0b132e3-07f7-4603-aa6d-4457b758c60a", "indicator--fd2ada85-84bc-4884-9008-7d667e19510d", "indicator--e863d5c8-58e5-4639-bc26-b92dc8341935", "indicator--7d024aba-d2f2-413e-bcf9-e5498959b19f", "indicator--0c7b7b2d-c13a-4588-8749-d8603c755703", "indicator--e79f35a1-9787-4ef3-bd48-f34d93f12d99", "indicator--2bb2ea9f-f382-4e41-90b1-2c02a2c74264", "indicator--68eab767-7be9-44c9-b08b-3ea698d63944", "indicator--5574559c-fdb3-47b0-a60f-47b922a4b358", "indicator--1c8d9c95-8ea6-453a-b9b3-1c8820941fe9", "indicator--f33972dc-9d80-4803-9d0d-e61ce7aaf00f", "indicator--5573fc60-58f9-43e6-928d-46db5d53cb8a", "indicator--97c11837-d200-4ecd-8130-390beac16cfb", "indicator--c70686b3-aab3-485d-855d-9d80ae47f29e", "indicator--90fec0b7-5f26-4189-9dea-decd2e476176", "indicator--4c77a1c4-dbba-4fcc-b91f-6bacfb268c49", "indicator--d22ce465-50f8-408f-9534-46855b30b711", "indicator--50b4dd68-5d49-4197-9cbd-4dfb7510c34b", "indicator--6f2e942b-b868-4708-a0dc-d5e09bcc2fdc", "indicator--e5ee0eeb-ebd1-4e62-b74b-3682c349c958", "indicator--e06c6daf-6276-4659-902a-4364b50f7da8", "indicator--d083db2c-c9cf-4f82-b382-f34b5fc42024", "indicator--cce70900-cc5c-4a7e-bee8-2d01ce0d3aa0", "indicator--e8916918-188e-48f3-9da6-cd3f1d700515", "indicator--24dbc2a7-6e12-45d7-8544-d8fd9f6538a5", "indicator--ef6ce0c1-899f-4933-ad4d-c61f0b9381a1", "indicator--c87cad8f-9bcf-4a73-a4f5-df4283773b13", "indicator--bdfe3591-65f0-4360-8e78-c0ad1d1bddd2", "indicator--a0fdef20-65b6-4387-9b07-d066fb429d7a", "indicator--9da9aca7-722f-42ce-9f35-eaf66de246d8", "indicator--d4f0766d-691f-4049-a71f-9786c192618c", "indicator--dc2b6941-c9f1-402d-b0bb-21ac4c6552c4", "indicator--630563a5-7c79-4b59-b4c4-adf0c7c7cd87", "indicator--246944bc-9020-40d9-8600-f14471fa0963", "indicator--4b32483e-685b-4d16-94c3-8bbd9e6c429b", "indicator--aba68b70-8313-4538-b984-20d0341a2868", "indicator--752301d1-9685-4df4-a5d0-926a11711c80", "indicator--c98368ea-9d53-4e27-9029-2cf262e06f7e", "indicator--daf112ec-f3ff-4e75-9168-831403361c6c", "indicator--9f4ff62d-4668-4331-af55-65cd3c5aa73d", "indicator--d1723bec-396c-4bc7-aa5b-8194e0c79dd4", "indicator--376b4710-ffe6-4b02-9ceb-fcee6213dd61", "indicator--5602d27b-f90d-4bff-a9d4-119640c7cfc0", "indicator--55807746-901c-4e1c-99c9-6f1165073e6b", "indicator--ecddbd93-af84-4f06-9cfe-cb15d2a93ca4", "indicator--c12aa895-3b96-438c-8d09-38b7401e8aa1", "indicator--5c2457ed-e79e-45e7-b342-1e95f4d9d0a4", "indicator--bdf963ca-63bc-4484-a6f1-c0e941a081f8", "indicator--a2e51682-019e-47dc-ac11-5b6f2af55fee", "indicator--637459b0-68e5-4b01-8316-f7773b6a2cba", "indicator--b45627e0-4aa9-41e6-8736-a33e07ceee64", "indicator--8308ae7f-6a6a-4a17-b7fa-c30735e87d76", "indicator--e6ad18c5-9d7f-40ec-9add-282be3382f69", "indicator--b1e3b646-6bda-4bfe-ad93-370f419af822", "indicator--d9cba00d-eec6-42e1-b5a4-29010433df9d", "indicator--6bb72a07-4a27-4c89-950c-d74dc99ea3ba", "indicator--73afa353-d900-4b69-b53f-1dd76af63914", "indicator--19788476-7754-4eb2-a9c8-d622c55adc83", "indicator--7f28fcb4-7548-4654-bb1b-56875b4df93f", "indicator--8d606a31-f1b9-4797-924d-5f10d6fa6fad", "indicator--5a9702e2-6469-4bdf-9907-ae90b458b3c6", "indicator--10174dcc-25fc-48ea-9420-eefc554599e4", "sighting--862e7355-7fd8-4e7a-9c87-b4ea3b70954e", "sighting--361c892c-e307-4918-bbab-4ba0a2ae3353", "sighting--b10ac01f-8b57-4a3f-a29f-9ac304ff455e", "sighting--ca935f92-77e3-4c27-8e5b-b08ae9694bd5", "sighting--611f0c40-1b04-482d-981a-e9b5b8ab3e0c", "sighting--b2566762-8213-433c-95fa-3c625b7ce4f4", "sighting--62ec769f-5ab2-42b6-acd9-d6052434be36", "sighting--69285322-f107-46fd-a899-5591c36beb18", "sighting--57af7c8a-906c-48d7-9648-0b22fbd33841", "sighting--a069a38d-e202-4b66-bc36-54603020e52e", "sighting--d7814291-3a80-4cba-b0e2-9fd09ee18738", "sighting--f402f304-08bc-4f5a-9903-3665e2e22aae", "sighting--0a09dd8d-c012-42fa-971e-76a50391a80f", "sighting--ed53b641-2049-4afd-a462-8de71278590a", "sighting--63d03b9c-ac1f-49c3-b0df-ad5ec8f2fa40", "sighting--8ffa4e0f-31ac-4f72-870c-b1ecff70dfb1", "sighting--04c9ad4d-df72-4459-b09f-07ba22656c01", "sighting--cb52793d-7690-4363-90cd-52008f8ecc95", "sighting--5eead06f-9a5e-477b-b16a-7bb521e07eb4", "sighting--87bc775b-6c71-46cd-9522-6cd23966e011", "sighting--49acaaba-4cbe-49bc-a696-61bcddc571f6", "sighting--71ed94d4-ffbc-4c7b-8784-fbf9dee90d8c", "sighting--274109ff-c866-4efb-91fd-975db6220b8f", "sighting--eb64b4a1-1e4d-4bf2-9555-214cf7817ef9", "sighting--72fd18fb-fcc1-4629-93ba-98f449672ed6", "sighting--cdc95bc3-eb03-4a4e-9ea0-481f1d104dbe", "sighting--fa760087-5617-440a-9607-404b4b220ce3", "sighting--8cf64029-5c0d-4442-8e74-32ded3749ea5", "sighting--4ecb1cce-0781-4457-b275-409852515bba", "sighting--ffde1d99-6b43-4781-a852-137da8cd34e8", "sighting--77008adf-52d8-47dd-9e21-e10f1ad438f0", "sighting--4cc334a9-9f82-4727-9d11-770467474019", "sighting--b9049a80-228f-4f4d-a4c0-99cef27711bd", "sighting--b252078c-a01b-4ea6-aa47-24d4b0b9fc23", "sighting--43744b97-7f76-41c7-bf97-7088e177bcf2", "sighting--f199a2a4-57a1-459a-84eb-ea673a0df724", "sighting--da57f472-72e5-4551-a28c-8471bbedf458", "sighting--d12ba758-04c8-4295-b255-a2cc798ac1bd", "sighting--149102b4-a161-4e25-a127-d49692f674dc", "sighting--53f8b27a-8cc7-4bb5-afb0-8c9350dbe49b", "sighting--c6c3ad6b-0d00-4553-8c6d-0c8ebef28330", "sighting--b9fea957-d896-4952-9c07-0925b1c08acb", "sighting--de0a47d3-c80e-4074-aed0-edaf540f2c4c", "sighting--8c415598-a2f0-4ec9-ad43-1384faf85d8b", "sighting--c5a1040a-1307-4a91-a6aa-67675bcb7e3d", "sighting--84a19b3e-9c28-4e3a-80f2-b8c7146fe9a3", "sighting--621fe595-2cac-40ea-8e0f-2ccb29853fca", "sighting--56e70ad9-ec49-4e29-be8d-875e8ad1b1da", "sighting--c0f00561-00b2-433c-ad4d-14da97f9dcd1", "sighting--84e30f0f-6f54-4c36-8d96-abe7d7741b51", "sighting--9effa2d3-4787-48cd-85ac-81f0e920bd3c", "sighting--90425660-c161-42ea-bf27-a4ef633e6018", "sighting--9c8c478a-fbfe-4ad7-a853-12de64962d29", "sighting--6cbfba2c-7a40-48ec-9beb-ff47e4e4be22", "sighting--37caa616-e583-4682-b782-134fe6365f49", "sighting--f121ed18-29e9-48d2-b2dd-367f2f6909fe", "sighting--33d1717e-b573-4a95-8b23-d270405b2270", "sighting--6e24fd55-e01c-4c53-a8dc-4a2b9e4cbb94", "sighting--c684e562-1198-459d-b3b2-851ecc8f23f1", "sighting--876147d0-e5cc-439a-82ae-9e47bd878d19", "sighting--fda79c1a-c07a-47b1-8c29-a9e1c265013a", "sighting--02001360-ffae-4c9e-b1a2-7fc18b468073", "sighting--c7ce2a19-7f7f-47fd-9887-3f86cbb5898b", "sighting--f4397ee5-8ccd-404c-bfcd-1504650e4572", "sighting--dee37ed9-c150-45a0-8faa-8dc0ef4b2c49", "sighting--9d79a229-a05a-49fa-a2df-209e79d49286", "sighting--c9663b28-b5ce-4066-b769-a59d126bfb44", "sighting--217afcee-4883-48e7-89b0-e9f6dbc011fc", "sighting--ec069750-2ed2-4a8e-aec6-c3effdd14d39", "sighting--12f4a587-c32b-477c-b410-8380790c3eb3", "sighting--8d6479c7-9c61-46ca-b8bd-a4ae2fd833ff", "sighting--be2a825d-7303-4b81-9e87-daf8a9887991", "sighting--16d5f438-dea0-4761-b75c-c5a9e977a492", "sighting--96fb3963-9be7-4c47-916d-7338fbd0cb91", "sighting--5df0f339-376e-491e-8377-773991283c68", "sighting--41f9b50c-38d9-4eca-ac83-5c454439c803", "sighting--e3fe1a91-9f6a-4d78-b699-9a8ac39cb29e", "sighting--68eb8086-2fd0-4c2e-913a-9bb6a7edf195", "sighting--2d5539e9-bbe4-4183-9bc5-8de9b1fb37ab", "sighting--3f0c1f4a-b07d-4612-bc1a-cc293a0ef3aa", "sighting--93ad6a90-5b74-4531-a7de-744441c84ffc", "sighting--76c86d85-53a8-4111-b887-854a9cb24756", "sighting--291bb257-6a7a-42ab-a4e0-6e1145786561", "sighting--fabca28d-e316-4ecb-99a5-fb8f8d2ca865", "sighting--fd242fd6-992e-4275-b1fe-2a9760cd1355", "sighting--28544f35-b592-4ddc-aeea-1576d02cc299", "sighting--c8642216-3453-48e2-9d69-f12460bdfc9a", "sighting--f8c67d1b-2cf1-4a2b-a485-8fd124411bbb", "sighting--3286b00a-d47f-4dd1-839e-c648aa3127eb", "sighting--ce16cc4d-9a4e-46b0-a459-3b56deae834d", "sighting--a5d35097-aa9e-40f7-ab33-d2d5f3a1a469", "sighting--373bae04-bc63-4f7e-aefa-c713474424c9", "sighting--5d514404-8803-4886-be34-55a39128bdd8", "sighting--bddb3f66-2a13-47cb-b001-61699160663c", "sighting--6766f30f-bdf0-481d-8970-9df54ce7e83f", "sighting--f6340e40-78b8-4206-8f68-386734e62598", "sighting--bff5077d-0645-40fe-a538-5363f036bd14", "sighting--f1fe0d5e-b1d2-4b0d-a4c8-71f67f933784", "sighting--777c11d3-a589-4c24-b4d8-3906c09a003e", "sighting--c6c5b3a8-68ec-45bc-8f15-0790684b6639", "sighting--1fe4b9ae-819e-4c2b-9121-6c320f69a11f", "sighting--e67e0909-8020-46e3-8ab9-87b80c099b12", "sighting--16a2e2c3-4bb2-4193-b4ed-d4fc35988fd3", "sighting--71f4da73-72e8-47b8-ba93-d3a092acb25f", "sighting--36d60c95-b6fb-414c-9078-a5d4cc9e34aa", "sighting--12aab317-483e-4df5-8716-cb7cd6614698", "sighting--188d50a3-9f56-4c07-9715-5a985d56aeb6", "sighting--e904c274-7ad6-4671-923e-fbe9a885eaae", "sighting--9774afea-80a2-4ce4-bd92-38ef46c60f74", "sighting--8de9f1e0-1b22-4be9-bbd8-06aaae0de6e3", "sighting--4ee50e03-3a92-4f1a-9541-9c7609da9ace", "sighting--25133ff2-9ce9-4529-870a-e86d36baaa8e", "sighting--72edd2cb-fdac-47ab-8af0-5b2cdde1f669", "sighting--57d07586-9e45-4156-90e7-7beed027c706", "sighting--c9beb1c8-001e-48a9-be9a-55844a9a0cf6", "sighting--cc0d7f9f-3142-41b1-963d-e70ac5219088", "sighting--f3f422a5-8d26-4f6d-86e6-0af4161c469c", "sighting--34b2dbd3-7564-43e5-87a8-cf9f10708fe9", "sighting--227207bb-29dc-465f-a409-8cd0036a4e43", "sighting--23929060-3545-4ef4-8db0-65335fde2867", "sighting--78009088-b461-451b-a3ea-90dcee1a6e8a", "sighting--1d8383c9-57c4-4a19-a152-bad40c13bbd7", "sighting--e3e175e3-3a6c-4d80-9c0f-647009a58fea", "sighting--8fb34f35-f6dd-4b47-a13b-473c20293c7c", "sighting--e9e5fadb-c6e7-45b4-b6d3-25fda2d0d578", "sighting--cf6badde-3ce1-4070-969b-bfa7304f27e4", "sighting--40377698-6b48-4a7b-9fcd-04e29d7f76bd", "sighting--92e2f298-13a6-4710-b444-bbd33545ff8d", "sighting--cb91b44a-33be-4ec5-86b3-28079a26974c", "sighting--c54212c6-1000-465b-a46b-bbfd7e7957e6", "sighting--cb8c8dec-d455-4a5f-a072-65c49cf796e9", "sighting--8facaab9-2fac-495a-85a9-304d180e9bff", "sighting--da60761a-0154-4dcc-a701-fd1baa0bab7a", "sighting--492b0216-db4a-4fef-9d3a-7722027e9dbd", "sighting--6411e804-5211-4349-b8af-ff5d00fe7502", "sighting--b3f52ecb-9317-4af3-a22d-6e8fbcc12fc5", "sighting--9bbe9051-c9ea-473e-817b-e3bb18fe8a99", "sighting--05590124-1b67-4a5a-80be-5fb546309ed6", "sighting--f95a37ac-c352-40b1-8410-6382bdd8ad21", "sighting--5edfe66c-6e1d-4202-8256-5ec2edbb01d7", "sighting--0bf38801-e5d3-4a78-abb4-0217cb28456d", "sighting--bd21f29b-3401-4e6e-af79-66b99e0b8727", "sighting--3e4678bb-07b3-4c5d-8655-1cfee4285698", "sighting--8e814cd2-8133-45c1-8140-4d0e3a3f65a6", "sighting--1bb1e055-78a2-4010-aee5-a2d55f3d1cd1", "sighting--60fce761-5245-46b5-b9e7-e863f700f87e", "sighting--cefd14ff-2531-4246-92d9-b7c095789d5c", "sighting--13c184f6-93ec-4b8e-a19d-867954ac2865", "sighting--685bdcb7-5036-4334-bccc-32f086551341", "sighting--af4c3dfa-5da2-4258-81df-e3b61b86fadb", "sighting--a20979b8-5693-44c1-9bfe-0096990ee64b", "sighting--e18f9736-fe3f-4539-9190-68efba2b99ee", "sighting--75a5cbc9-129f-4c09-b053-66b7c2340311", "sighting--39999556-57b6-4175-97e7-46258d775d1e", "sighting--2a716b5a-f6a7-4070-a51e-9098bf498eef", "sighting--f3dbdf79-328a-4c9c-b87c-95ea648595fb", "sighting--aa8bfbee-5061-41c9-b2f4-028b6af6ec6c", "sighting--4abd62c6-6f67-4dde-8c80-6580d8897ceb", "sighting--c2991f1d-7132-40ff-ad6c-3da796197053", "sighting--2ed94200-be14-4d81-b653-19823374d636", "sighting--d68c1492-905a-4243-b4da-3c626d18d760", "sighting--318e84f1-a4ed-4504-a970-1543f08d6703", "sighting--98a78c1d-14a4-4f12-9eaa-f738d501ea21", "sighting--ff7ec59f-7e8f-428a-abac-02f2e7c29b94", "sighting--1e82a9ac-52fb-4575-8df9-0adc802c74ab", "sighting--1c393c23-f2bc-43e1-9466-dab1c3a5d06b", "sighting--a96f342c-9554-4298-b612-5719b07af091", "sighting--e4fd8561-2263-4ecf-b1ab-0abe3d77c4d7", "sighting--113d9e90-7d7c-4030-8a27-84b5c177791a", "sighting--456c516f-1368-4ef5-a8f1-157ab7bbaef9", "sighting--0abe830f-abc1-47a0-9066-42232a432a36", "sighting--def05fbc-4940-440e-b575-215f5077be36", "sighting--b12ea0be-e5ff-42f7-bff8-dc17e818d1be", "sighting--f64a2257-c609-4fbb-b6b9-90d5b09aa699", "sighting--d9f618a6-3301-4489-8a19-51a84254d1db", "sighting--4f63665f-13f6-490b-9c4d-0cbfdd0274c8", "sighting--0eaeaa3d-9c3e-4064-b54b-373384cf0e8c", "sighting--6b6f4b69-75bd-4239-a849-2f70024f2afe", "sighting--716e53a5-8d7c-4746-a3f6-2d926916d1f6", "sighting--1a602454-14b0-4f19-b42e-e8a59670b8b2", "sighting--ec94a07c-7ef4-4578-a53d-a2a3433a688a", "sighting--34d9c72a-5b21-4160-8467-fa5054acf827", "sighting--d7c458e0-8475-4722-b853-ce5b78bf9226", "sighting--3aa27555-5809-43de-ae1b-9a3d0613089b", "sighting--892e786f-02f5-4941-94e1-aae60bc183e4", "sighting--490bc381-5bac-4560-a596-16583aad05a3", "sighting--a3b1f477-8e97-4db2-8ad2-84fbacfb9b9d", "sighting--b8679823-968d-4c8c-a1b2-d3799fdc9303", "sighting--4273ab2f-bf45-4dee-a312-75b2bbad7e6d", "sighting--b3598f1f-4cb2-46ac-8f03-30282990fdfa", "sighting--0374940a-9fae-4153-b9e8-db72f8d88e25", "sighting--74d5b8d8-e630-45a3-93fd-87c9d4d9c851", "sighting--19965fe1-8935-41ba-a6f8-964917e13abf", "sighting--f2a2430e-8af7-49a3-aed8-d1e6b8388a84", "sighting--8f17d968-21a2-42a8-ab83-ee40081c8400", "sighting--3064f34e-fc8b-4d2f-a5b7-94a8c4e4af6c", "sighting--b42c7595-eee8-4fff-917a-7d8571a55ad9", "sighting--89413df0-df0d-4059-a366-702103ee0e16", "sighting--2a9cf5a2-39c1-4ce8-98b8-839bc678c56f", "sighting--eeefd331-7ae0-4409-971d-bb9dd6235f98", "sighting--2e2220b8-417c-4dc5-987e-ebd67b86a753", "sighting--072ad787-505c-40e2-a8a7-310804f33059", "sighting--79e01757-19ad-4e1f-b488-f4ed66082b94", "sighting--fea53b33-a9fc-4029-85d0-3025c8149643", "sighting--a842ecc7-9a5c-40de-b895-51e8994cdaeb", "sighting--049640c8-b63c-4812-a429-47f453488061", "sighting--bd67792a-1f76-4028-8d6d-df4a3dbc258a", "sighting--6464eb43-373d-470e-b3da-e1f06c418d38", "sighting--4a8ff953-08aa-4aa1-a342-5cb6a70d4d3c", "sighting--c959f582-a277-4bdd-89d8-fce3a294a6ce", "sighting--7e0d0228-73b4-4552-a2a3-028e30372602", "sighting--736411d1-44d3-46d4-ae58-659c8a46c886", "sighting--67083a9c-89f8-45cc-8330-7474db2eede0", "sighting--dcf07407-ae60-4157-8d9d-8becb23a3efd", "sighting--9fd9f559-9792-489d-82eb-dbb645115c7d", "sighting--8dc37a7d-ef80-49df-b80d-3683a3247c56", "sighting--20318444-e69e-4422-9c83-72d417a335b9", "sighting--88f5bc21-db74-4320-903e-7eb8a71b4ee9", "sighting--e9b71cc0-826c-4132-8273-9b4572393530", "sighting--915d1c75-bd5d-4b37-822e-e44da6748eba", "sighting--f7692c5b-4fcd-423a-8d60-7daee4547f7d", "sighting--ed7655ca-8380-457c-96a7-c9efe0d30ea1", "sighting--23bd5a72-b57e-4f3a-a4d0-4d8d28b92b8e", "sighting--e088192a-80d2-44a7-8033-c2f9933ab58c", "sighting--1b00698f-b84b-4f73-b2c5-1d2d70675df9", "sighting--f974a626-4faa-4f1a-9016-e9fb812d3368", "sighting--ecd535ba-d2d7-40d3-b722-472521b17cf6", "sighting--155d6e23-bd21-4828-9aeb-4475eced0fd9", "sighting--991b1d61-4d8f-4223-b904-8ed2691510b8", "sighting--214b0769-fe26-4ea2-8b1b-90bd3fb98b07", "sighting--53686c9c-c401-46bc-8f14-32ff44445614", "sighting--575717e9-4eee-4774-ab8d-582d8761f36f", "sighting--2daec431-646f-4799-8d70-5f7dde493caf", "sighting--79ef215c-8d28-416b-9c6d-c36080d2faa2", "sighting--f8586053-b24e-4569-a435-b99c2092540d", "sighting--bfee222b-79a9-446d-a19c-56fe0e4a9ceb", "sighting--f4b905dd-4ab0-44e0-8d12-ca5929d41432", "sighting--6fab4e85-d973-4777-a4e5-e970a7af044d", "sighting--8b7d9c22-bd21-41f9-a919-27da3b2920cd", "sighting--b73c368d-e59c-4adc-a983-1950c54eb4ad", "sighting--a6222b17-b6e7-4dcd-9ea0-4d2fb782a826", "sighting--3ceca3b2-4199-43a2-b5e8-6ea5a8731af9", "sighting--9abc471d-0980-4fcf-a15a-6218830b58e2", "sighting--f6e6143e-7371-4a7e-9a14-e88a68c71011", "sighting--91eae42a-1784-4ce5-a1e8-ccd633510ebe", "sighting--11233ff1-1499-4e7c-84ad-c2b5189c2ca5", "sighting--06b77ba5-148b-44d3-a5c9-c783095e7ea3", "sighting--3999ed01-8a8a-4f77-84a5-3a537294aea0", "sighting--f8ce0f84-0930-418f-b1af-194e49cd3135", "sighting--d080e56e-cd99-449b-840c-2786460a9204", "sighting--0dfda32e-fd2a-480b-b85b-f2c504fbb4fa", "sighting--4a7f10fb-c013-4475-b6f2-8990455f1d86", "sighting--ce9cb4ee-d828-4a03-96cb-8cde56680df2", "sighting--d2a89f82-ae30-4927-9d40-c53839927c21", "sighting--00419b65-a5ce-4996-845b-47ebce586fdd", "sighting--571f5df9-1920-4117-8d71-2e1d68bc9def", "sighting--adef4a6f-996c-444b-8265-2952f673e26a", "sighting--36565469-9559-4c33-b029-f4ce3a2dc8b8", "sighting--3352262a-22c6-4309-bced-2eb08547d0a4", "sighting--0577c3dd-039b-4f40-86e4-83238afd7930", "sighting--a087cb79-e5ea-432b-bd4e-f225e1907f75", "sighting--4182c2f3-7241-4a8c-83ac-a76d3f0346e1", "sighting--3780c4fb-6805-4a3a-b475-1e65da18ee0f", "sighting--90f40b06-fc2c-460d-8c13-5d3d50d995b9", "sighting--8950bc21-c9b0-4b81-99d0-9538b824130e", "sighting--654715be-e6b2-4afe-b7ae-fee8e32ea33a", "sighting--14e9dbff-c2f0-4795-bed1-8d6a194f0889", "sighting--55b39740-46fd-4948-a28c-954a28548d9d", "sighting--960b348c-0ef8-4f98-b961-bdfa1d49a030", "sighting--4232959e-8cce-4d40-8fe8-6870829da7bb", "sighting--f77c8b68-3bdc-49a7-99d4-c1aae44bcb77", "sighting--8905c9f7-c998-4fe4-8ffb-379cb6254d3c", "sighting--de0b821b-06be-4291-b01e-1bc71e7132e6", "sighting--e7b677cd-943f-40e0-abc4-b221d07e70fa", "sighting--a520ea9d-c185-4a0b-b366-0d5364d6a570", "sighting--fd124c16-3e54-4178-8f52-24ea1d94e444", "sighting--634bac78-5d63-4def-a9bf-5f9e9ede12ed", "sighting--7afb46ef-25f7-465e-af0a-1754d50bfcf6", "sighting--6503f912-dc73-42e4-b4c0-d7f97b81fb9f", "sighting--3d6966e8-551c-46d9-bab4-2f96538f3798", "sighting--1f91e2cb-319a-40e5-8b9b-f869f7a4c055", "sighting--9cfbd7d0-e1c9-461d-9145-85fd98359a90", "sighting--d65dc4e1-48e4-4aba-a887-cd54ab0a46cd", "sighting--10fd52a9-30fc-410a-9892-05a15be0e924", "sighting--d3b5d8db-399f-4d11-b361-c0b516128cbc", "sighting--cbc83eed-8238-4a3c-9140-5ef01ba404b3", "sighting--6048eb0a-1684-4b20-a618-705f4138ecd9", "sighting--e1a1df88-d136-4958-ba34-0c9ec9455b4d", "sighting--a4fdc4db-0997-4f32-a495-894f0552fee9", "sighting--8d19e6fd-8a06-4ef3-a602-2ef0418565b3", "sighting--a33e085d-c15d-4a88-b9da-ccbe1afdef94", "sighting--b0b3bf10-9c80-4100-b884-e6aa3b3674ea", "sighting--31ad9a6c-fefa-4c9e-8237-1ded4d794037", "sighting--8b2f8b61-d319-4aea-9a49-b9f9375123de", "sighting--1f369402-eff6-4628-92f1-7a0f2a04ce7e", "sighting--0eb6072e-fa97-47fb-8f86-4b9a3c8da4ce", "sighting--ad640490-ab2a-4438-ae5c-21a9d09b4381", "sighting--897cac8b-e9df-4df0-b988-45a20d9e40e1", "sighting--bde210ba-3208-40e5-a4f8-23a901f43f4d", "sighting--0b710ba6-f28c-40e6-be19-955c64343870", "sighting--ef094c7b-697c-4bf6-ad3d-ba4f6efc1b61", "sighting--e7dc1f71-ad7c-41b1-b8e7-e1698b5e1100", "sighting--36a8d787-e707-42f6-b467-90b8b1b3a818", "sighting--e73d1755-7bb7-46c1-ada9-028e6aef3861", "sighting--41a9db1c-9c3d-4086-9df6-5ddad5b36c91", "sighting--f07d506c-6cd5-4d17-acdb-a277ed751044", "sighting--3340d887-495a-478a-b550-e8a60e77ce73", "sighting--5966aadd-8ae6-4035-98bf-7ed29cc60d9a", "sighting--79c79f16-1ee2-411d-9068-1269a505670b", "sighting--291f9ac7-ebb8-4ac4-8f65-75e7c0e41b41", "sighting--8f866c59-7e17-4252-ac1f-3ee95642ff18", "sighting--cec1b95a-9fa1-4883-a14e-aa3a11a32ee3", "sighting--e2aa8a91-2da7-4106-9ab6-2d99dab7f051", "sighting--39797592-1fd9-4346-9418-bd6dce10fdd9", "sighting--74ca4c4e-5026-492d-8ce9-a16c1b8466bb", "sighting--cc63ec69-e74c-4cf5-a55d-58809fd9a30f", "sighting--1a6fad3a-d824-4577-ac5b-2b91b338c9fe", "sighting--f3ccc938-bc20-411c-b8f8-5b0bdfea707d", "sighting--9518a757-8e2b-4318-956c-33681040480a", "sighting--94d98cb0-6c71-47bf-93d8-7bb41b105d00", "sighting--62eeb4f3-882d-4595-b7ea-5d6c39a90a09", "sighting--5ef899f8-bf9c-43c0-bd65-6d28273c9c82", "sighting--d1ebedbc-a3d2-4dad-88f7-ac8c2f1b311c", "sighting--fb1dc58d-eb79-449d-92ac-e68c31256dbc", "sighting--3952cf90-5ed7-4b5e-a329-596b5192a840", "sighting--c3a68fff-39b2-4fa0-b5f6-d683bc837669", "sighting--fa5cd3ac-3e02-4ad2-b99a-9fa149b08edf", "sighting--9178f8a3-d47c-4f60-b308-e0ae6cc1f497", "sighting--51345c69-83e0-47d9-b221-d4ca57623084", "sighting--6fda22e6-51c5-4f1b-a18f-2b533a21af36", "sighting--8ebef5d9-3021-4fcf-be7d-efb88162974a", "sighting--b203a3d7-93c9-4f74-ae9f-2b8a267e046e", "sighting--3744446c-9413-4525-8d94-21f0c3c5feea", "sighting--27e77473-92dc-4109-96cb-5bbdd7daa866", "sighting--b235fd13-dc00-4090-b28c-82d39aef7370", "sighting--52991232-700b-43fb-b6bd-3eebaa7b8fa7", "sighting--2d7ae28e-281e-454d-874a-b73f7f44d9a9", "sighting--34eab50b-5bf4-4832-b186-2c518912c02b", "sighting--3893642c-520c-47e9-9322-b0bf12a23fc5", "sighting--a1855461-3055-466b-8494-5f4271e320a6", "sighting--341408a2-6d58-4a78-b211-a106a26c89aa", "sighting--e1618c5c-3172-4d0a-81a2-dde1f99487bf", "sighting--f969f0bb-f9e2-4562-8942-7e033f6b9d01", "sighting--adbbb9f3-4cfa-4af3-a481-b23d4c3cb0c2", "sighting--bdd8f4dc-0866-499c-b763-bcc592fa2a71", "sighting--eb9a7fa0-7c43-4726-b711-602681c9270b", "sighting--313d1d69-5725-452b-950f-cf06c4e5071c", "sighting--5fcfeee8-7937-48df-84ba-f2595c8922bd", "sighting--b72172f9-9148-4e03-be57-6c97a216a138", "sighting--6248f2fd-5a3c-4852-a518-90e84bc5c9ed", "sighting--e52ed669-b516-44e7-9303-f4d426c2c7b5", "sighting--d23c9fbe-6ad1-4120-b840-7a7abfbf4537", "sighting--f8ec36e5-83f3-4d3b-afd7-c1a0a704eff6", "sighting--2e682b1a-03b7-45ef-96d3-836dc6a76ddd", "sighting--9959a879-0387-4178-be54-0cc4dcfe18f1", "sighting--d91318dc-319a-413d-96c0-8176d06fe333", "sighting--5f84bf37-7526-40e3-bd1d-dc41baf75a5f", "sighting--7311bdae-11fe-493b-b191-934be71afc06", "sighting--b6702ccd-ee78-45b8-bf76-d501f8dede37", "sighting--4b1288d2-4fae-476f-a5ce-1f57bfb036f2", "sighting--d4f029b6-525f-4a1f-b6ca-bcc88f89431b", "sighting--e6178b62-7dd7-4418-979c-959107c55733", "sighting--d4d5220b-7adf-45d3-a161-eff61181069c", "sighting--5d3f9358-7010-4114-832c-65d7256c4d94", "sighting--19038444-d374-4eb2-8744-c4361f069201", "sighting--2eb78b99-8103-4980-929d-0aadcbc52297", "sighting--72cfb8f6-72bf-47ad-aed9-6b527916ff4d", "sighting--66f08691-a218-477d-8f86-d85d26b896ef", "sighting--382f956a-b560-4d6c-a751-997de68b4187", "sighting--525589c3-9f84-44c4-a6d4-df5cab42cf23", "sighting--842660b3-4471-449b-9b17-d23ad5509741", "sighting--c58357a8-9dd2-4362-903c-d80fcfb5a1cc", "sighting--8e2906be-64ac-4179-b52e-455fe71614b5", "sighting--0e59dea6-b84d-4073-b1a7-2fd6bb5c0db5", "sighting--3c5fead8-779c-4560-92c3-ef9bed4292a8", "sighting--01e28aab-ec7b-4b09-83e3-fc83e2dff952", "sighting--7de26838-5e1b-45c3-b1a2-af2706f4bdef", "sighting--bdc939e7-d2b7-4785-ad5e-f78d0c433c77", "sighting--b46096bb-a86d-44a1-8359-80bca7196251", "sighting--f1d0862f-98f2-4d93-8ce1-6c24ec25dd09", "sighting--3bc27335-9061-4a0e-9766-8c0da50c2bd6", "sighting--fa974ad0-0e26-41b6-b556-166a062af705", "sighting--5d5ffba6-ad5b-4660-9493-3d82631b09c8", "sighting--95fce1e8-f25c-45df-aa54-9f8e4c5dd1f8", "sighting--83e051cf-9f23-425d-be86-46338f99c2c5", "sighting--40996a1a-c3b5-42da-82d0-01550977ae49", "sighting--c04a9463-6159-4000-b359-2ce66a398eac", "sighting--47557ac4-69d0-4157-9504-e13dea6bb819", "sighting--60fffdeb-b53d-40f3-8b7a-08499c6c8ea1", "sighting--67237576-d6d9-4de7-949c-ef0c28b833af", "sighting--4c6daebf-60ee-44b3-965c-eff3988f59ca", "sighting--f6c74d0a-0322-4c70-a29e-ed203d34cb7e", "sighting--5dc1bd4f-bfa0-46e4-a4b1-89fc62f79f6d", "sighting--4f7b923c-60d2-4c06-9e28-ae82a110edba", "sighting--842ab79e-6d94-47f5-afb9-65a96183e98b", "sighting--104793d6-89b7-4494-be4d-193ac77f97ec", "sighting--ada4f553-75c1-425f-b705-c208b28fb173", "sighting--a443f448-db32-48c0-b8d8-34e48d3d2476", "sighting--7358ed87-0a56-49d9-b360-9a99c7ee04d6", "sighting--4f0464d9-fdd8-4f47-881c-36a9b0382b9e", "sighting--ee0702b0-3e1c-40ae-8022-012d778964e8", "sighting--dcecc634-630e-4394-95c5-4b8c57426d9e", "sighting--cbd4efd6-60b9-4f91-82c7-2a203a5ab2dd", "sighting--fca16e09-6f47-4361-80ec-c3f158fb30f2", "sighting--6c72cfee-c4b7-4e81-aeb6-bce42433fe50", "sighting--4564efef-2192-40d3-b43d-9996c82ee1e1", "sighting--a9c17e96-2703-4a2a-9cda-05eccab67656", "sighting--9e3dbb13-e07e-4038-bdf0-6d731c8ef68b", "sighting--33676acf-c464-4dbf-8761-22f719779470", "sighting--fed1fa8b-38a9-4cb4-9f98-bedbab3527a3", "sighting--f2b6a4eb-eb90-42bf-b2da-9bb7b65b29d3", "sighting--0befdef4-a38f-4745-b88b-a74dcbf4ad3c", "sighting--a8e07ccf-9add-4741-ba2b-b60e62ac3e94", "sighting--42bb9148-71a8-41d8-b5fb-e1870f651c71", "sighting--90e0ebca-adda-4320-a3ca-d19b35324f69", "sighting--e1eaaafd-692d-46f5-aeba-6b6673f88703", "sighting--2a276527-4076-4517-a36e-4a8ec42d178a", "sighting--64120f12-1edc-4d22-9249-6aa0fa7a5b7d", "sighting--4638dca3-9bff-4510-b163-10dd37d45f81", "sighting--b367557a-0a91-48cf-9fa2-3a6941f56660", "sighting--8057d1d2-ac3f-4af4-b7c4-b43d6fbdb45a", "sighting--d41a85e9-8d95-4549-9a41-32bacdecfaec", "sighting--9419af7c-6576-4e95-9907-467402d90a41", "sighting--38bc576e-fef2-45c4-8be8-2103889e1c21", "sighting--39ee82fe-4a59-40f1-91bd-9b546c477cbe", "sighting--0431717f-0052-485b-ada5-e7d6a3c7acf5", "sighting--e745c9f3-c948-4826-85d3-9b11f716448a", "sighting--4a9311f2-afff-4bfd-b904-b87a4a6d87aa", "sighting--4a7801c2-4c27-49f7-98e6-47f36be2ceb9", "sighting--e07187b0-7bea-4489-97aa-21f609c289fa", "sighting--4d751873-4622-4d48-924c-eb3045d06db4", "sighting--696eea65-7c79-4f60-8c51-db61ff1a4a74", "sighting--d92386ac-883a-4d36-b876-473b5a54d3c8", "sighting--04011c8f-742c-4ca5-bcd2-41c1578ba3ee", "sighting--5e8bad2c-af24-437a-8fa6-c4074b114ee1", "sighting--b29d5c45-94da-4669-baa7-c9c1523597da", "sighting--4322f375-4030-470b-9b4c-c9f50296dc9c", "sighting--0a123d39-34e0-4183-b00b-15c9bf0f45f5", "sighting--74de3a74-a910-4dab-a417-ee9868afa644", "sighting--f687ac90-d7ce-4007-b011-efdb01f609ee", "sighting--774bc84b-e81f-40ec-9962-4fcf2b853785", "sighting--c1f3811e-a5a0-430e-930e-976e0a25c5b4", "sighting--eedf6f23-0a38-4688-a6f7-058a601dbbec", "sighting--45975a1c-9cba-4d2c-9b1e-dab50675382f", "sighting--5b6e5ef8-715c-40b9-9613-d0cd120b9530", "sighting--4c110857-f892-451e-8a14-ac6952d8f334", "sighting--41a181c6-0d16-4baf-ad2d-8b8fd538ae9e", "sighting--2fa711bf-8df4-4a55-bbe7-7cceb971a182", "sighting--2c48d514-ddad-444e-b73c-3b4c1a2780be", "sighting--1aa5e3bb-dc8c-4e39-9345-e8c0764b7c6a", "sighting--16a05a98-3fb6-44fe-a340-e9bb59723cb9", "sighting--92d556d8-3d56-479e-b810-e511c04c766e", "sighting--af2bfd9f-eb30-43db-9722-f54e32030ca1", "sighting--81de6e23-95b3-452b-9b1d-9def20b60bd4", "sighting--c2564417-0872-44dc-a53f-9f35da582288", "sighting--98e45299-4c62-44e2-849f-725126adb582", "sighting--a07eb471-5631-436a-9d85-3937ea07fdc8", "sighting--ab174568-a2c1-47de-96dd-218ba494060a", "sighting--68755071-4d32-45a0-a26b-7d3b758071bf", "sighting--9fdaed7c-c1d0-4505-9c1e-fc19fb9a5793", "sighting--afc86e36-27d7-4643-9aaa-e0333bb8e5ba", "sighting--adf2bd47-3888-43fa-a52a-0ac3b157b040", "sighting--8c8f2fd8-11b9-48a7-a328-e652ea1c5c09", "sighting--1a824c99-3f01-4f0d-96e1-7101ea36d445", "sighting--d5bde5c4-6657-45d2-bfcf-842dc7b7c930", "sighting--7c7d5660-a5eb-453c-a60c-c60d9eb66dcc", "sighting--5bad0afa-80ad-4e48-bc23-e102d9f942ef", "sighting--63cdaec2-b70a-42f5-887e-d81d803cc2b9", "sighting--3cbf9084-2116-4a74-8ec0-0fd91340a64f", "sighting--99bdda89-f311-46d5-a97f-d5c41cdd4889", "sighting--ee113cf7-8723-4c70-ab98-d5bc33bff5c0", "sighting--6e9bef7a-cbbb-4e87-b6c1-89e073a3a859", "sighting--b3df6a48-9829-4869-b673-66079af0eca4", "sighting--3f167d41-b106-42f4-a996-6a520c5232eb", "sighting--ddb6a30d-25d3-4a69-b601-5e4af3d0ef3a", "sighting--e95ee616-a1ac-43f8-ad42-53a82e0ea151", "sighting--5f222cfd-7267-4f4e-87d3-038a84372904", "sighting--38ec9ad6-8dc2-4754-ac04-b7146c51edb1", "sighting--ca4ac5ce-3f4d-469a-ade6-383d18218a2c", "sighting--aae2172d-acbf-4764-8d2e-f6f176342b00", "sighting--76de1db2-6bc9-4137-aaa4-ec0042891143", "sighting--ad4f4241-c2a8-45dc-bc02-ff77bce33376", "sighting--97046adb-f2ba-4b59-9776-7faebde2c5a6", "sighting--ad14a555-76f1-40ff-a692-a99b68fecafc", "sighting--44654f07-91ee-4ea1-9390-c68fe2e4c919", "sighting--88058b76-386c-4bc3-8872-585913d47191", "sighting--b3dd26f7-0b86-4020-9f42-a1dc73af3792", "sighting--15e923a1-2501-49d2-b6f8-66e9ede593d5", "sighting--04475e60-bffd-4d45-8da5-05e412811364", "sighting--c31a4278-ad91-4fce-9116-3d1a9c2469b5", "sighting--b64e48d5-d82a-4b49-9c12-3beedb86d243", "sighting--8c59d75c-d70b-433c-9bf1-aa22b3327a4b", "sighting--c3b2298a-b9e1-4412-861a-b669594220d7", "sighting--528b71b6-380a-4fd1-9a3f-81697bfbcfb0", "sighting--d117e5f7-1cee-46b9-9689-dbd44515cf32", "sighting--05ba60a9-50fc-414f-89ad-2f1e3e7fecc5", "sighting--b16087fd-a3a0-4004-a995-99c56bfca042", "sighting--5ebf1f01-bf75-423d-8b2e-2731d4159916", "sighting--14ec260d-1187-401e-b277-25bd6347be21", "sighting--fd1649d6-e3ed-4712-bdda-df014ef78690", "sighting--8cb7b693-c86f-470c-9197-5e106879e8e3", "sighting--b6ff0618-2b39-430c-9b2f-12947d29a91d", "sighting--bdc30fc9-6c2e-4647-b2a6-72c27a84fb3a", "sighting--ab81c8f5-584f-49e4-beb2-542502e3bbf5", "sighting--7fca78b2-cba4-4dac-97e6-f8074ecc46c9", "sighting--d54f2b0d-3b60-4616-9a3c-d1a74335f8eb", "sighting--abad637d-9e12-4aee-8e24-d153deb9b71d", "sighting--97faf2ef-1165-4fde-91b6-f2e1743a4922", "sighting--6efb974b-9d70-44f1-b36a-d69360ba2f42", "sighting--feca8a21-6033-4ff2-a932-d83801ec22fc", "sighting--f86cf442-a49c-4fe7-8a42-f6cbcda5092d", "sighting--65fcdcc9-3e49-4c72-bafe-f62a92fbe6b0", "sighting--7ab1a82c-d61e-4963-891e-fff01f3dc5a8", "sighting--90db60a1-d7e0-4e34-8b07-5363c6d4aa4a", "sighting--8ac79b6f-157f-4a67-bbbc-091c6e1f6012", "sighting--b39806cd-3bc1-45bd-959f-c4d7d24295a7", "sighting--70286e6f-f252-4952-8b3e-ada66b333a8a", "sighting--2021da18-f4aa-4bc7-b1a7-e4a2b97290bd", "sighting--ac1e6cd2-0bde-4c3b-bf5a-dbe4550604b2", "sighting--ef830408-fba8-4c29-8302-6be9699d2fb5", "sighting--497bfebe-a90c-4e49-acc8-1d6048cf2fdb", "sighting--b96094fc-e4b5-422c-9f35-93e382ff7fff", "sighting--480e9134-740c-4811-b1b5-3644df6ead6c", "sighting--02266f13-42a8-43a8-b627-824b7e8c300f", "sighting--5bab2f52-608e-4a46-8f26-e7c3b8785616", "sighting--847af1eb-4c31-4e95-a054-159f6f0f9ac0", "sighting--a4c01669-b236-4853-9f2a-a5402cfe5129", "sighting--4aece962-e91c-49fd-90e1-ddf759a6d007", "sighting--0e4c43c3-b3fb-4604-8ded-ec8aa6d3a7f2", "sighting--f77d3c82-b4f4-4d37-8a9b-b09c1e75940e", "sighting--6a203043-cfcc-42b0-bf75-a53794c7499a", "sighting--7b8d488f-e12c-40fe-9046-328cdf8f9c31", "sighting--5036982e-4de6-474d-9658-8a3e1fb1d421", "sighting--6e1e0904-8278-4783-882b-e5e78e80edd6", "sighting--bce96fe0-4f3f-49f5-9615-f21ae32f0386", "sighting--86e65294-a152-436e-ac73-a43bcf056d1c", "sighting--4d825b80-9a7e-4e42-b455-6c5b6c6bc629", "sighting--637381d7-a48a-40e1-8d20-4c5e5809659e", "sighting--17c0c5af-006b-4b2e-9951-ec24e2e450e0", "sighting--0e121526-0459-43cc-b11a-85cbbe919ed5", "sighting--1260fcbc-7ead-4be2-8bf4-fc7b71165d4c", "sighting--d0a59976-61ea-4271-8d35-965b4152d252", "sighting--28e8525b-3888-471b-9423-1b74110e6b82", "sighting--85362163-a089-4305-afb3-4afa1fea7e21", "sighting--6b2fbfde-e67f-48c3-9ba5-7560a08aee41", "sighting--ff9761e0-5908-46d1-825a-2c1c18ab7ad8", "sighting--11ae3a51-8415-442b-af0a-110ca6d794ac", "sighting--ab96f4af-17ba-4fbb-931d-52c6c4b3112a", "sighting--828542aa-fce7-4880-a119-6a040a759916", "sighting--0461cdc7-1a8f-41fb-a164-4bf1072fc94b", "sighting--65f02b3f-b636-45fb-8fbe-7fe8a6423e86", "sighting--8416ba36-d620-47ac-aa1d-2b991a86b7d1", "sighting--a8cf44dd-2f40-4818-aceb-7d3b2e5a06d1", "sighting--e4733e11-a41f-4f7c-a8d3-eb6c4a1ba34a", "sighting--8a328ed3-b42d-4593-b190-a6c203c514e0", "sighting--c9638ca6-e653-4fa9-a10c-723e34906b8d", "sighting--c6db2a4e-6743-43d7-9534-9c997ae40cc4", "sighting--dd3b41c2-7a9c-4ac8-b450-7d6b98b38c0d", "sighting--3f475152-22c3-48b6-bb1c-71a7f52bd0aa", "sighting--9ecff1b3-78ba-4aca-b84a-0225dfdad1cb", "sighting--f3b30d45-c1b3-4308-a1b9-53b981b8e924", "sighting--7f883d61-adc6-48c4-b379-dffda6badc3b", "sighting--5d60fbfb-24cd-4633-b123-9c086b24489c", "sighting--e5ad18f5-2023-47d3-a2cf-a69926b506e7", "sighting--8d79fc28-1e44-421f-97ca-93a08eab58d6", "sighting--99b8d9cc-e09a-4f73-ba2a-3a5d8b549749", "sighting--3dfa31ef-332f-4467-a809-39eaafa0bd18", "sighting--14e40454-ca9e-429c-ade6-e7150e3dd72b", "sighting--9a1b155e-dbf7-4d38-9c66-67a290f27d59", "sighting--f5021400-0e97-45aa-9112-da8dd99d6d27", "sighting--a95aca3c-55b5-4319-9f04-0940d2535085", "sighting--20c12da4-151d-456b-9563-b9681adc79ce", "sighting--50278dba-2171-445e-8f88-52914e1882aa", "sighting--493cf967-94f2-4a31-ba33-b61126c309fc", "sighting--113abc33-a73e-4179-bfcc-4a3cb7faa9ee", "sighting--e6020dd1-9dda-4ba5-b6ee-2e437d693211", "sighting--e88a7468-fdb4-42eb-8a8f-2da2dc6d1c95", "sighting--e330451f-17ac-47c5-aaf8-39964cd40fb3", "sighting--7a186e99-5742-42e0-b485-4a4aa399ec14", "sighting--ab9758b2-162d-4caa-bb1e-d9a5d360d064", "sighting--526cb284-1c40-48c9-9f27-29fea7e68e74", "sighting--a1418122-0f87-48d0-a79a-7f57c7d10309", "sighting--d15784af-f6cb-4994-90d5-d399afa48f11", "sighting--178d00de-3241-49eb-89b1-bfbc7099e66b", "sighting--3f019691-2b3c-42e1-9dfb-feb691c3ffa2", "sighting--adc66e75-da0d-44ce-92c0-eb03360c3f01", "sighting--1215a3e5-0be1-44ff-998d-05a028c78d3d", "sighting--0fb1bfca-ffb9-4b6d-9d91-b37e11d32399", "sighting--bd675bc7-b776-45c1-8979-c3e15d1862e7", "sighting--857c47a4-0806-489e-99ff-062e478a8bdf", "sighting--96d3fe1d-bdf7-4a8d-8823-641e8066671d", "sighting--2bb5d0c3-6c5e-4fcc-979b-40d443299322", "sighting--d492239d-9c1f-4596-b7c1-47a4a358c4c1", "sighting--49aff14a-637d-4f00-8cbb-f219a009c7fb", "sighting--ae3fb0f1-2114-4393-8fea-b87a51adcf37", "sighting--763603fb-23b8-40a7-b182-e432d49ce9c0", "sighting--8f82decb-cc6d-403b-9730-3ef5db4f9cf8", "sighting--fc7fcefd-9c70-439f-8eda-6f310e56a206", "sighting--320a73ca-dbeb-430f-931c-fed0ca0146fc", "sighting--53aea3e1-f97e-4efe-a0d1-23bde769cb19", "sighting--e61e4914-3509-49ee-b237-ab5ce06781da", "sighting--cb22d5ac-b089-4536-8a9f-6bb96cae3177", "sighting--982e4130-1327-4030-9a5b-9bd44ce519d2", "sighting--618b0783-0d00-4ce2-81f8-0810261b85af", "sighting--e7ab131c-2674-487a-be35-10cc9dc10872", "sighting--413ef83e-c537-49cb-967e-03230750ed99", "sighting--d4327608-cd59-49bc-96d0-a4333f61dae8", "sighting--96175a17-aeb9-4c27-9abd-e4a05b2be316", "sighting--afebc63b-ce97-48f0-8f29-c6e55d7a9429", "sighting--82607b04-705e-4b98-9371-0565f724a837", "sighting--69a38a9e-dd9e-4022-9729-4b0079bae1b2", "sighting--01ddf9d8-c948-4746-b301-5026a69eb727", "sighting--26aafea2-880e-4cdc-bdcc-33db91f51bd6", "sighting--74ba84ca-2f37-458a-95f3-e426506ac5b4", "sighting--8cac1ee4-2b76-44d2-85f8-f68b6fa8d6e5", "sighting--42c198a4-c1e2-4c1b-b44f-a3cb6f6f7843", "sighting--b4a07bfb-e05d-48d5-a104-1181ff6883fa", "sighting--6f69b86a-f6e6-4c57-b818-b6e4d6416690", "sighting--3f727271-dd00-4536-965e-f1277f583393", "sighting--bc22795c-1f3c-4f62-b85f-e0d8a82c0ece", "sighting--cdf39730-8201-4801-be6d-05d406d6b0c8", "sighting--b48fb1b3-c388-4117-93a1-3567ee812805", "sighting--aaa2b884-6a43-41c4-9138-2f222aeb838f", "sighting--129ff691-e38e-4b8e-a9ce-a95acacc4500", "sighting--8f276d7a-3b00-4905-be8e-cd7ead249793", "sighting--c7053d0e-65dd-485c-ba88-d206e8b57c67", "sighting--7b696343-ad7a-4814-aaeb-08e925cef8c0", "sighting--bdfde7fa-4e01-4994-baa3-41571486b750", "sighting--dc815bb4-546f-4ac6-ace0-16e577e7a5dd", "sighting--314a73f3-bdef-430a-b8ab-22dc8b112cdf", "sighting--8dc35ecf-5ea5-446e-af60-8454fc0a252c", "sighting--ac6b41a9-26fc-40c8-9b41-a0af680868ca", "sighting--67379db4-7aa1-4578-bd41-b0023d740b3f", "sighting--93fd6f20-94f8-4232-8dbc-1bd7240346eb", "sighting--304b253c-03af-42eb-bf4d-969c713ac12b", "sighting--1e483f69-4f87-4501-822a-20941049aed6", "sighting--bdb176c5-0f00-4237-a0e4-3b8c55995969", "sighting--38a141db-ca55-4cee-ac3b-bf9e55026ba3", "sighting--34b138d3-4ebd-4a25-b39c-9807d7efe762", "sighting--2d64159d-9b5d-40a0-bda3-fb02d37b27d3", "sighting--38d0d43e-b755-4f87-a396-09f0332e5453", "sighting--25260302-97bc-4419-a0c1-52c0a22ba985", "sighting--e1efe73e-0365-4a23-9f37-79c0ba16d0f3", "sighting--ed3440d9-51bb-4130-bfe8-bb57e42937c4", "sighting--34707d76-2ebd-4707-adc7-ebb9b6d89f0e", "sighting--f780a605-12be-4da9-8e4f-94900a0f2480", "sighting--ad32bd88-d07c-4e7f-b9ab-3700861fd050", "sighting--526bed51-7b99-4bd8-ab90-dd9babd16270", "sighting--09fd57c2-9727-4df4-8e86-7d9943ebe301", "sighting--83e8490c-1eb4-4059-9ec2-72363ad45f14", "sighting--a6ac7960-4926-46e9-b6af-b058e7f0dd92", "sighting--3d40e81d-213a-4664-840e-da830117973c", "sighting--1e34a44d-d752-4a63-95a5-f12143d07873", "sighting--71bb8363-ea26-4f31-86b6-b81b79bce79e", "sighting--7934202f-8039-4e55-8241-5561d7b6d455", "sighting--009e0bc4-e471-48ef-8b9a-3027fabbef81", "sighting--f17ba28c-4c41-49a3-85b8-7945b4c42c6f", "sighting--bbb2e2ab-af4f-4ddc-a5e7-aab05a9795b8", "sighting--77046d4d-4464-4ec8-8253-2bec454b7268", "sighting--53f40e31-b1ee-497c-ac72-7743b4f91b2c", "sighting--523d72bd-38aa-40bb-81f6-07168dfaff04", "sighting--68167bcb-a6c4-4881-931e-87621084c1ba", "sighting--18357bde-f5c4-4bdc-a13e-c4ff82dd5495", "sighting--a35cce7a-a62a-4cd9-8b2c-55b1d33a049c", "sighting--19fcf7a7-860a-43c5-91d2-e1100cb4a699", "sighting--9e786a70-b353-4578-a3b9-c33d79ccf0f9", "sighting--466e9358-6b77-469e-9baa-36d10f30dfba", "sighting--791248ee-f094-4f0a-b91c-805f2e9dc59c", "sighting--33cb312f-2238-43c8-9996-9ead2d8ad8db", "sighting--269f65bb-50d3-4210-8ef0-4b20d7045ba0", "sighting--a6ac9ea9-06b3-452c-aa4b-4be7d0dfbcf7", "sighting--fdd77ef6-cade-4967-8e9e-e31fa663dca1", "sighting--ef13039a-233b-4461-9d3f-3f33a2d9d899", "sighting--cc3bbbb7-45a7-4f54-8caf-764bb2012720", "sighting--f2957ff6-7f0a-4d56-b658-e244fc94334e", "sighting--35dc8d32-7a9c-4117-90be-c1f58cf3a732", "sighting--d074437b-1932-4421-a19a-29dee8bb80ea", "sighting--3479d218-812a-45f3-95d5-678a3332702b", "sighting--10f84899-b3f6-46c5-a432-ae991a196e34", "sighting--24819ab8-1298-4552-b869-1c8de4d6338c", "sighting--783daac3-f448-48e0-b31f-d3f1075d45f1", "sighting--4d8021c9-0ade-479f-be82-e6cd510571da", "sighting--4f18c67c-fcf3-437e-9da7-2e43d47d30e1", "sighting--ea58fac3-ae60-4ddd-a2cb-477ce0c9da93", "sighting--577535c3-5a00-43d7-bc77-daf67aa18766", "sighting--26acb7d6-354a-48b4-bd07-cc05aef75847", "sighting--39779b83-27a4-4e2d-8e6b-e5402c816183", "sighting--96088a2e-0de8-4e78-b7a0-b239f4d66028", "sighting--3fe2bdbb-7f76-4ae9-88ae-9f6ee1bb10df", "sighting--925b9a8b-825f-4490-b465-7eead251df76", "sighting--f590e29e-8f49-4dd0-a31c-26db7a373dcd", "sighting--546e9bb3-8a71-42ad-8a37-9f498e7e006c", "sighting--8ebaa750-7dad-4c6d-8ae6-c9b57d05c736", "sighting--33e94b80-f937-434a-b16f-4781ce3002d1", "sighting--5d364372-9e00-4efd-b382-4080b718cdd6", "sighting--2ec4067e-abc7-4fc3-9919-eab68ce594ee", "sighting--a54badb8-321e-40d0-aec5-2639e984e441", "sighting--07e6dcf4-5bde-4e7d-91d6-a9dc9e898278", "sighting--2fe2e0c0-6467-40b9-af7d-f68c4c5c1ee7", "sighting--480598c7-085b-4087-984d-3ae01205eadc", "sighting--c526fabd-df72-432b-b16d-a5e4b679b7ce", "sighting--c95141ac-3ce0-488f-a9d9-67f133e1d965", "sighting--7b1a7183-c9fd-441a-9479-0ab7c9315732", "sighting--aeaa7f7f-5d89-4512-8c4f-f8cbed67dd49", "sighting--0f789c16-4f44-4fe4-99f6-5ad850cbb030", "sighting--193ecba0-74ba-4189-9a1a-f3127ab8ee49", "sighting--1d99d71b-6ceb-4ac3-9a1d-672524608d7c", "sighting--c95c1c1d-0ddd-4809-98ef-31e48dc9f561", "sighting--8d099dbd-a74b-4256-aaa4-bdc7cd1df8ec", "sighting--2fb7150f-d31d-4860-a688-243ec4162c76", "sighting--808d15de-91b1-454c-8ed0-e9742de5e6f3", "sighting--b828d4b8-5b7d-425d-9af5-cf8e81e8e862", "sighting--b85631de-852c-4ab4-8923-545218766d4b", "sighting--9025322e-c69f-415a-bcee-347f7c482371", "sighting--88ad2bea-b43b-4b5a-a274-95d474015209", "sighting--a9feaf43-fc7b-473f-957e-0618b6879a54", "sighting--90db7e20-bd3a-43c4-be23-a00ffcc9c6f0", "sighting--7e777c9c-5ef2-4f16-bc1b-d02ee5e9879a", "sighting--194763b8-6f8f-400f-92f3-3928e67be79e", "sighting--a2f1a79f-7a17-492a-9e48-2280e4eb9b1e", "sighting--6728702c-354c-4dba-b222-8062756fcaca", "sighting--f5549831-aa62-4bc7-812b-ceca85637082", "sighting--79304f08-a6bd-4004-a0d1-17621061010b", "sighting--9c4f085a-14cb-4f94-9785-c27ecaa85762", "sighting--f8530afd-c8dd-425f-8098-bdcec14276ee", "sighting--4055d8c7-5240-4366-bb8c-8da684d73a97", "sighting--b44dc084-06b7-4ea3-8795-3d9f06a2f881", "sighting--952a3da4-6ec2-45a6-b50e-b340682f3468", "sighting--61ddd784-14e3-48c7-9544-70c58f4c90e2", "sighting--1d9d4f18-034f-4c39-8f54-1d17e95af67e", "sighting--0c0477e9-8c47-4736-be59-3f95571b40bb", "sighting--7776d6c1-2871-46f5-bb16-164c03b2f96e", "sighting--20b9b7e7-145e-41ad-9efd-a1363bd02728", "sighting--d64a169d-846a-4efd-9918-d83a25540643", "sighting--9f927f48-0c4a-4008-86ac-6f52578f93b9", "sighting--75f72671-4e90-48b3-a8e0-7c6dce0b055e", "sighting--7b7da357-12e8-4fb9-968b-57bef61c8efe", "sighting--798a2c8e-9151-47f8-8d7a-fed9021b04fe", "sighting--e1e36433-470a-4e81-ab55-73bde9687b9f", "sighting--cd9d0005-93bd-48bc-8231-cbb214879b4c", "sighting--697116ad-e3fd-4d3a-8ff7-904921d4c2da", "sighting--0a034574-3300-4078-af5a-117c1b4536ea", "sighting--e16abd3e-3840-4458-9ff9-17fa56075e66", "sighting--1aafb4bb-da42-4ca6-88c9-547c025ef4b8", "sighting--b0ec165a-d295-46c3-a970-59d0181768b6", "sighting--4d8d0f69-edab-440d-b93b-6f43d4846fe1", "sighting--3522cca3-32cc-410e-b6ee-29cb435b5da8", "sighting--e846ec1a-8ef4-4006-9b89-7558ab2d7c46", "sighting--37b597be-4611-4db1-8c03-44996989424a", "sighting--39e196ac-5eca-4ce6-8347-de0b4131cc33", "sighting--8a050509-9c19-4362-87db-12bb4942a1e0", "sighting--cb10638d-2821-4b69-b7eb-c393f7f4577a", "sighting--1d680672-225e-444f-a110-3b0ea7289767", "sighting--7ba56227-4b0c-45ea-9adb-ec5537c24036", "sighting--51fc1ee5-1201-42c2-856d-e61803a592bb", "sighting--bd0aaa8e-f3b9-4f2c-bd18-7d7b6b6b1790", "sighting--5519afab-8c1c-438e-9479-88b3369b44a0", "sighting--c41de9b9-210d-436e-a581-6e6ed3da076d", "sighting--3d634784-5eca-404d-9b86-adf90793956c", "sighting--c747bf06-ff4e-4eee-a3c3-1cec3541c16b", "sighting--657cebbc-070f-4df4-a778-5119d8f6527a", "sighting--545bd850-e54c-4842-853b-a1b14b3d9809", "sighting--ea6b8813-7163-4584-a3eb-63d88f8ab090", "sighting--7eab53f6-297b-4f03-a5f6-cc856440af98", "sighting--2a6143e2-b5c7-444b-9f3a-d886550b7f18", "sighting--bddcb1e9-6b12-4324-bff2-a750db513846", "sighting--5b2202da-2a8e-40ca-8293-8a9f7885c2a1", "sighting--d0cf7e9c-7474-411a-8a2f-3a4d5796da44", "sighting--d9dc37df-363d-4064-befe-36142ce9b73d", "sighting--3c6a4a96-228e-447e-9040-d0217cdcec49", "sighting--44121952-9950-4e50-8ccb-67c64cea431d", "sighting--27f42227-b7b5-4b21-af12-1e355c483ae3", "sighting--f5975e1a-7a39-4b8c-8090-f61d57b82e6b", "sighting--2b99275e-7e86-45df-abbc-411cba5fc556", "sighting--a2fd17ad-bbae-435f-a35c-55cd866ba517", "sighting--ff2bb909-ffd6-44c1-8dab-8c2793f02ef5", "sighting--9eb20d9b-cd31-4a25-a418-58ef231d98e5", "sighting--9514a0db-1b2e-450d-bac2-ac5ef70e93b1", "sighting--026a720f-2f8b-4b50-8186-bd7d2f4a272e", "sighting--9c2b62c6-cbfb-4741-8d89-068d3bb05200", "sighting--56827f5d-1017-474d-9fd6-5bae5db3d162", "sighting--015ee723-5961-49f7-a958-a0b13bd02104", "sighting--7a802f39-bea9-427c-bbc0-bba429aed94d", "sighting--edade832-68d2-46aa-908b-44becf34b180", "sighting--c339fa8d-5cb0-4aec-beb0-eb3e9108de41", "sighting--c6cc97f8-6a41-4ea5-849d-3c63c6f24fdf", "sighting--c003f03d-3e98-4ebe-9a17-64198bb430cd", "sighting--d4da3c33-f18f-40e8-8a5c-6f94fed0e7ca", "sighting--15d5bf78-353f-477e-90c1-43d91fc7d06b", "sighting--abef24c5-7eee-4c5b-91c9-27ea9720c1ae", "sighting--52089ff5-1142-4606-8c38-c56bbdbec155", "sighting--bd98e637-93e8-4cfa-8b2e-3f04be4039a2", "sighting--2856ccca-b5e8-4811-bed8-05e72a1166ae", "sighting--f8163f10-0cf7-44e9-96d5-43400e15d7a8", "sighting--a0702333-dcb5-468c-b86a-d67d229e033f", "sighting--964a1ab8-67dd-45c4-a5b8-0d885654e145", "sighting--96edf98d-032f-42a1-9b37-d6d15078bfe6", "sighting--b3b74072-fbfa-462a-9fe3-45be225f23de", "sighting--d46a29f5-6573-47f1-850e-8f155d18ff9b", "sighting--f411bbeb-8911-4ca3-a996-c372ea492973", "sighting--721d66da-f4c2-4c89-97e2-ea9fdeab05b8", "sighting--1c232230-58b3-423d-a5b5-b1a091e3e28e", "sighting--d91f8232-1cf0-4504-8d0f-37a9147c0363", "sighting--d2c052e4-f348-49c2-9a32-700762c07f8c", "sighting--2f72cfb0-b406-4860-94d0-5d909f15f8f8", "sighting--3a4bb129-01c3-4a3c-96dd-fa6b07caa726", "sighting--0b5cdbe1-6a75-4a55-b7f9-179c26135732", "sighting--2a6b7fdf-a488-4ca2-a27c-5f2fc7034bb1", "sighting--f4dea3e8-b66e-4340-a3c1-46928609a397", "sighting--8571dd48-0398-409f-bcab-6f2f5dc07765", "sighting--92e5b824-0e49-4ec2-ac50-08274946fc97", "sighting--69a497b8-e887-4482-8047-62482c99269f", "sighting--2bcc9788-3976-4642-aa40-cbd9f4f94b5a", "sighting--74b9385b-2dfa-445a-b977-884ff093add8", "sighting--60d06770-953f-4c50-8505-a3a72d5f0b9d", "sighting--6c331815-beae-475e-aca1-7522d9f7b256", "sighting--fb2acb0c-5c03-4ded-b477-7630ac495070", "sighting--4d0d2632-7eac-4607-90db-5f20234e9cde", "sighting--90f14656-e871-44ed-9274-f43161d0c662", "sighting--781d2c4e-bcd6-424e-a483-9bdd407cae16", "sighting--74d0c389-8cb4-440b-86e9-a7639306f47c", "sighting--0b377621-f528-4272-bf93-9b2b57ef9e14", "sighting--4e2ff179-1898-42df-ba6e-0abcded32fc3", "sighting--798d01c8-8761-430b-9369-838d2e662068", "sighting--b7dabbb0-ac29-4c18-b753-2e2e5389d503", "sighting--4cc7d63c-5db8-490a-8cd3-8189c2684ec5", "sighting--911517b7-f46e-4b76-8744-3c327e7d6b49", "sighting--0d9366a1-eee3-490b-99a1-b730b4722b20", "sighting--a30a51c2-7cec-486b-b365-bdcf9fd0b5cb", "sighting--7d2caf72-1c2d-45c4-a91a-5695efc86ef6", "sighting--fd24f085-a707-49d3-84a7-39d4807f81aa", "sighting--9920b193-cdf9-4682-aa73-8c2795f2952b", "sighting--6da3c421-14ce-44ab-9b67-0e94066703c7", "sighting--45778842-0679-4099-ad9e-2a26987883f0", "sighting--b5730254-ef5f-463d-9dbb-a7916d15cee3", "sighting--b726bd8f-e87d-4e41-a439-3238679981ff", "sighting--1c6ff189-b9fa-4ed8-af08-6559de548d69", "sighting--34efcce8-85b0-4261-84fa-6b55bf13f561", "sighting--365e867d-c8f6-40e0-9596-6d68c7136d47", "sighting--0177014a-f617-443b-8588-266c9fb37a0e", "sighting--6a7729fd-d0c3-4d79-b308-ef87c3493a4b", "sighting--8c6b7515-8580-48db-b572-a62ffbd6a874", "sighting--1f570ea3-3f78-4b79-ab5f-520e2deae531", "sighting--031dcb89-5059-4cf3-b056-bc0802558e95", "sighting--b8ba9e71-943b-4731-80d8-ede1959f15ae", "sighting--62c41b47-8c7a-4baf-85ef-616a16a2b6c2", "sighting--f79a5cdd-b29d-4682-9324-055ff4555758", "sighting--aa67d4aa-d194-4ac3-981b-fde45cd181ad", "sighting--5e5eeb15-d6e3-4a0b-9d73-fdc73205a0e3", "sighting--5c75e87a-382f-4891-80b8-905a00ba57a1", "sighting--91e810b7-deaf-4eb3-b0e1-968193b3963c", "sighting--393d8a2b-4aa9-4c35-96b7-da2ab7769abe", "sighting--2aba628c-6096-4600-900e-1ba3c88f3a0d", "sighting--5d267186-ae46-4ab3-888b-35c26162aace", "sighting--5409d0c1-73ca-49f8-80da-386d5db48a57", "sighting--77bf2536-0237-4474-9dd6-263d801965be", "sighting--9a828896-c1a3-4907-9a56-c468c461727d", "sighting--6845d371-a4ab-4273-8caf-c8b9fc02e8fa", "sighting--1c337fcd-2e67-42b9-a347-97763d5387e9", "sighting--ce1dbd8a-e6c1-4655-962b-42f6d3ec4336", "sighting--d8341979-cf9f-4bf8-91fb-d0bd65c31549", "sighting--d1e88e62-494b-40f7-b291-ef2596f45184", "sighting--4edc9cc8-eb40-4cea-87cc-6ce25ecc760a", "sighting--bf6afcd1-0661-4202-bd89-08f96738a894", "sighting--4b651dd7-b2c0-4348-be27-da592e632627", "sighting--0d83befc-1ad6-4217-9717-e14dea3eafeb", "sighting--97f25f3c-e3bc-47d0-b6c5-38be978c8d95", "sighting--afc74494-ba86-4ce1-8d51-3a659af458d2", "sighting--34b37fb3-c546-47ce-a38a-4ed43ec6b9b4", "sighting--7aceb5d7-40e6-4610-88d7-fcd6960b7b70", "sighting--27fbe104-c252-4039-9e31-0137cd755aea", "sighting--698a8304-0741-4604-b0b4-e8068f344199", "sighting--dc983c1d-b31f-41ba-a01f-1f010649ad80", "sighting--5271d0e7-63ef-4651-bbcd-90434d1972b5", "sighting--74aa35b9-c50b-494e-a119-14daf3ca3d53", "sighting--8232cde4-fcd8-4201-8cc8-1bf4ca811d40", "sighting--0e7f491e-fb81-4069-8c27-201a0af8dedb", "sighting--d720ae7f-6e75-4177-853e-c8c97040e070", "sighting--e3452144-d737-457d-a55b-a0445adbf1b9", "sighting--883e5e90-1417-45e7-a383-9142a69381aa", "sighting--a6368b97-0d1e-4f14-bc2a-5367d20b84d3", "sighting--d830d68a-006a-41a2-8a98-389542aff085", "sighting--ac85aec6-c15f-487c-b574-7e35ff5bbe36", "sighting--25680f29-6541-4ac2-a8d6-3e50e081a1e1", "sighting--a4c4a0be-5461-424b-a1dd-ee4e5503997e", "sighting--40e2f21d-e57f-44ce-9261-409c3f564588", "sighting--2051e8dd-d551-4fe5-bc31-8e6389891d1d", "sighting--6aa78e96-5242-4c62-8ac9-7f79f34658d0", "sighting--4c8a7c7d-28b9-4cdd-a6f3-b89ad45f6e23", "sighting--a5d80602-8c88-4f19-bfbe-c6a7a57598da", "sighting--5fe4ad2b-d057-47d6-923a-743ecd3d203d", "sighting--d5882df2-168b-4350-b99f-6137a478956b", "sighting--7462df30-15fb-4bd1-bff3-8ce1e7fc03b2", "sighting--dbbb6695-e9af-47ed-a084-614fbf297637", "sighting--cab92a2e-9cea-4d79-9d88-fe034cf97aa6", "sighting--2a0f4f9c-020e-4b80-818e-fe914d4bbc31", "sighting--8be5fd0a-3bfe-44cf-90a2-9b7a4bbc73a8", "sighting--082263c2-3324-4014-9bfa-d653b276638c", "sighting--f250937e-1757-4b8f-ba49-a120c3efe766", "sighting--eddc5081-4fdd-44d9-82de-6bfdf5e98860", "sighting--06393a24-c683-4b24-b5aa-e61f7023d66e", "sighting--3e026807-c1b5-4732-9717-1b0426d1096f", "sighting--5a189f0d-3718-48f0-8a94-781e22084c34", "sighting--22c005da-6c73-468c-9e8e-ddb205f3f45b", "sighting--8903f7f2-2e5c-43cb-8731-520dfcf6c969", "sighting--88395289-8a0d-42bc-aa62-26ab8a6d116f", "sighting--12f120b9-cc3f-4718-9a24-8d8db76aa94e", "sighting--e878fbc9-ef9b-4f80-a01f-0e9ad83aeb95", "sighting--34d196ba-22ed-44d8-80ec-3c9fdf572b18", "sighting--7a770ec0-ed06-4c20-9a9d-5c1eadfc3045", "sighting--c155cedd-051d-478c-adf8-eeaf3378a818", "sighting--03fcdc0e-ef79-4f17-90fc-59a7fa323091", "sighting--6eae9734-dad9-4447-be77-f38bc9d88887", "sighting--f8829c21-d7cc-4aae-b30a-84662f5e1a4c", "sighting--911c3b0b-5119-423a-ac73-c9df2b205c31", "sighting--bdc39a66-1745-4344-ba90-55d59ff98a74", "sighting--e5e3e4bb-7c24-44fa-a8f0-c6dc6267599e", "sighting--924cb20d-1d7b-43fb-b80e-f536fcc8f44a", "sighting--b1141aab-e4e6-4815-b4f1-230cd3185a14", "sighting--268460c4-52c8-4a39-9dd1-4e49bba78463", "sighting--6feef581-6694-4772-a6ce-aa4cadbcf6a0", "sighting--98f2ef16-b432-410e-885c-a180c791ae39", "sighting--db927f57-ff33-4fcb-9dad-6e039765d2ba", "sighting--35d0ae34-f07e-42f5-ba16-353b14618503", "sighting--bdf2d143-6969-4351-bb89-2a1b7d9a24dc", "sighting--47b372f4-f818-49a2-b280-e9f7a3a08923", "sighting--36cc1502-97aa-496c-80a0-53aaa17ccc52", "sighting--5f7dab06-f0ed-413e-a365-0fb5cb924145", "sighting--9ea4243f-eb9f-4c68-9fe5-192fa391d846", "sighting--5ebc1ada-e161-496e-af72-7df7b3acb663", "sighting--2750f8cf-55e7-4571-ba2c-956c532c2392", "sighting--c7069a70-dd3a-4c8d-babf-6dee122cef3f", "sighting--9ce785b7-26cb-4dfc-aa6e-f970432d20da", "sighting--864fc3f4-bbbf-47d9-a104-f16ff33fa411", "sighting--6f9f9999-b52a-4720-b132-f917911527cd", "sighting--89da38b4-2e13-43e4-9963-85e8b8893fa1", "sighting--8ac6e44c-68ac-43f1-a87c-88ee2fa477b0", "sighting--de067dad-bf49-4156-b8d9-910b72c6c5e1", "sighting--41af583e-0e85-4a93-82ae-68800b81599f", "sighting--aa794e23-aae8-49ed-8e3c-0affc8c2dbbd", "sighting--1025a4b5-0d01-4917-987a-f0896c372d14", "sighting--39dc83a9-baf7-4c34-95b7-786d51a9da59", "sighting--5b5992b2-c7a6-4ce7-a1ca-0a74b2d2f2b7", "sighting--c1b35cb9-72e9-4fae-99ed-80ebf4c9ed5f", "sighting--6eae278b-cb82-4ad7-a55c-6ef45aa4025b", "sighting--c6a7775e-f9a4-4c06-848a-5edd58f90553", "sighting--9a8ef712-9d69-47c8-b733-e4b3922650ce", "sighting--37ffdc8f-2d7e-4a40-b3e8-bd0de22c390a", "sighting--37d8d55d-09a6-4b4e-bb70-23bcbf35988f", "sighting--ff5e3def-f4b2-4095-8343-60187b942593", "sighting--6f1b7e82-32d2-429a-91eb-76291e87781f", "sighting--d2332068-9862-4368-b7bb-964195d98201", "sighting--8d2707b7-c8c8-4119-9504-54f5a61d9caf", "sighting--3a6d0d18-5600-45c4-bed8-efc07e74de7b", "sighting--b2f8ce26-1ce7-4c51-8e2c-71dc87c6e3b8", "sighting--6762388f-2e46-439d-b310-26420a1ba498", "sighting--a32f112e-e3f7-4c61-939a-bdde53388d28", "sighting--2f368b3f-e8d7-44eb-880c-f2b52162df47", "sighting--fde500c8-67bf-4048-897a-4ee368366aed", "sighting--5918a4c6-5c1c-473a-b6ec-926e5ec63369", "sighting--d7c58950-558a-4318-9948-aed590aefd8b", "sighting--eb8cd5e3-d7a0-4878-9435-8d3bb796add2", "sighting--04d6de9f-c453-441b-8919-55fe9929dd17", "sighting--6c8bceb3-1999-4d51-910a-23e332250fda", "sighting--f9123703-82a4-4631-97b7-7d0f2b36ea35", "sighting--294d23b5-f338-40c5-bc32-22ce736d02d1", "sighting--39a7b181-d775-407f-b7f3-4c3bcd84ecd3", "sighting--de1c4777-2c15-4a09-9234-19f3ad2e26ce", "sighting--686b8df6-35e4-4d93-9f2e-88075def32da", "sighting--fc95ab62-4a7d-4e37-a3ed-7f09e76f5635", "sighting--a4ffeb12-5513-478c-9d98-fe7c3e30d627", "sighting--78ec23dd-ffd3-410c-bdfe-b0ae50b4eb89", "sighting--49fa585c-6bf9-42f5-b188-06d922473187", "sighting--5b6651bf-428f-4724-92f5-2454485770ad", "sighting--161385ef-b75f-4108-8555-556984abde93", "sighting--042af2b1-b6d9-4699-826b-ef79e072dbc6", "sighting--683e2307-cd4b-4a88-ab85-2bf9e4adfbd4", "sighting--7392e782-697e-49bb-ad97-437bdcba5fb0", "sighting--faa76cc3-1b8f-4bb3-9f47-10488db45e72", "sighting--900f7c5b-fd57-40d9-bf06-1d7895667563", "sighting--efab849a-8b12-44d4-b137-00de66e243e4", "sighting--f6d1d5ae-f0dc-4b6b-98c0-af4f6b804baa", "sighting--e2b6a0cf-6e61-47f5-8655-40dd6d0ac5f6", "sighting--be93b822-fec8-4868-89b8-694cc919b4d0", "sighting--4e11960e-44ea-400f-8355-1aa531d10fb6", "sighting--9d535ec1-1c1d-48df-8954-ad18a5281d19", "sighting--58a12ed8-651b-46cd-8060-43e4762e9315", "sighting--e114182e-7495-493a-b719-8b0718743410", "sighting--7f92d510-c5e4-4535-bc41-e8048dd1e575", "sighting--1e77381f-fc03-42e5-8750-72905a54b4a0", "sighting--afdb09fb-88f0-474d-aabc-133e1e926785", "sighting--f12ef84c-1fb5-4a41-8973-2722280742d4", "sighting--55e372b4-fc57-44fd-8ee3-acbb16b89a77", "sighting--64a40c93-aaf8-455b-a8c3-6f4e41a57381", "sighting--01baace7-ff09-42a6-9e33-05a61a1936fa", "sighting--e801e9bb-dfdb-484a-b5eb-fafa41b94d39", "sighting--1d55f77f-5741-4fd3-b6ed-d671ba5b583b", "sighting--65469773-b508-471d-b65f-7ba50d12849a", "sighting--62041233-3111-4fad-a197-a5b738a4491a", "sighting--e6103d63-1647-49af-a633-f62186605cc4", "sighting--d108e0eb-e3d9-4533-af1d-0d44ca7e0768", "sighting--22678b30-140b-48e1-99b1-912f22d24074", "sighting--6bbb40bc-272f-474b-af4d-fded865364f7", "sighting--6ab5cb6b-fe79-4221-b2b3-0890eb5a52b2", "sighting--8d6dedd5-9426-4461-bc66-479053e8964f", "sighting--5d4327c2-59ac-4779-80dd-1e5d9a35f93e", "sighting--f9d35120-916d-42e5-a008-f593cf3d1ca6", "sighting--54105d8d-4bbc-4fe2-8f9d-b04f344bb63e", "sighting--7bcd52aa-cde5-4df8-ac66-9bc3e6a53536", "sighting--60e46a27-6b70-4542-b04f-b697d00bc014", "sighting--e3177272-aeed-4caf-b91e-62c5426b1911", "sighting--148ae891-cb25-4231-94e0-ae9356c1946c", "sighting--2432b5db-17fe-4b3c-aa68-139047398793", "sighting--62a5f741-ddb6-458a-b44a-446a5e36e40f", "sighting--8ecfc5b1-73d1-4c6f-8d3a-11545fe46225", "sighting--6ffb0b40-ad3f-4ee3-92a8-7cf48ad54aeb", "sighting--a3c5030f-d823-49b8-aa77-9d3ba584ea66", "sighting--3b1cbab2-b5e4-4744-bb39-de446c977c1a", "sighting--d0c241db-4a8f-4720-8fbf-ad4c48068741", "sighting--7b88d99a-a222-4399-9259-afc6187f2087", "sighting--11949bed-1284-4f04-bb6f-4b533a363f30", "sighting--3be0db7a-56ad-42a3-90f6-eb624121bf5f", "sighting--0f364609-e1e6-494e-9384-94dbe1f1d97b", "sighting--9bbb53bc-2c5d-432d-a722-ae646eb1c2a8", "sighting--20fe4d23-0ef0-419a-8a1f-d6d8fd11b848", "sighting--805cc7e0-0e43-4a7a-9d5d-f6be2fa94b3c", "sighting--835bf1d7-b1ae-474b-bbbf-7a7dc49f25d2", "sighting--d15ce013-0a0a-453c-9096-f92c1258319a", "sighting--861ab5e2-1b3b-447e-b553-03e7e9b1211e", "sighting--8e89b9f5-eaa1-4f75-ac47-645fb50c1dd2", "sighting--06861054-d1b9-451b-8b0e-4f2ababd5937", "sighting--b862e55f-ae66-4bfb-ac1c-f777e9a4dd6a", "sighting--74b7bd37-d6d6-4f0f-8530-cd6f6f4a674b", "sighting--32a991c7-2bba-4b4c-8046-5a358b94c7d4", "sighting--99fa96bc-8d73-4c6f-871b-892fc11282c9", "sighting--b6a39d5a-58e5-4829-8b1a-9a93b70a7473", "sighting--d3aa07c3-cfc1-402f-9023-5d8fd4aa0dc9", "sighting--32552cf2-300c-4a62-b3fe-b9858c9877dd", "sighting--11ef1f1b-6fe1-428c-8afb-e4b29fc66a58", "sighting--cf896f90-ba77-4cb2-bd87-018c2b857310", "sighting--bee09950-5d5e-4ac0-8cac-f9aa04aca7d0", "sighting--9e316c14-a6bc-4c28-a31f-3d83ef137d29", "sighting--c796b059-41b2-41c7-b40d-9517a92ccf06", "sighting--c3ece8dd-ff6a-48f5-8be6-ed2e0ef31d9f", "sighting--c8b55bf8-42a7-4a10-92cf-c423b2da6261", "sighting--edb6b3fd-c40f-4de2-b316-f82575b6876f", "sighting--fc722b7c-b0c0-4eb6-bcc5-8fda0fe87dbc", "sighting--485098c2-8867-420e-ad6c-3bfb93b68302", "sighting--ed012992-236d-451e-96b0-1b8ad151f32a", "sighting--9f9781fe-310e-441d-a53d-51325e1016de", "sighting--4dd2ef78-8fd0-4f4b-bbbf-fa024fef1b89", "sighting--1c4503ac-2ef2-4751-8e98-d7e209f5a1c5", "sighting--a036ae13-aaa7-4643-ac80-98270d5b6e1d", "sighting--2c17c2f6-ba0c-4bf7-b4b3-c2113645666f", "sighting--c89dda21-f4ad-4024-9b00-e71903d8bf56", "sighting--7b5d3b67-4337-41ec-b69e-f6b39b3e6f4e", "sighting--286abf9e-c77a-479d-bf98-ce45846f892a", "sighting--5c2e5bea-12fe-473e-9e1c-1103002b3424", "sighting--e096f56a-73b5-4514-a18a-91fd94f7b6f4", "sighting--4bf7a1a7-463f-4059-8574-57c0c770a929", "sighting--f9828413-937c-4471-9e9f-787292961f71", "sighting--ff864f4f-eaae-4c76-aea7-9d6883bcba53", "sighting--98bfac5b-6eb2-45e2-9168-5e79eed93cc1", "sighting--d745a539-e8f1-4f64-a5ce-0893afb29299", "sighting--3efe190c-fa00-49d8-a6a4-f55fede9eb13", "sighting--0d767769-9ac3-44e9-90c8-e98441ee18cb", "sighting--1c0ceea6-9dc1-4273-bf50-437a4d95c898", "sighting--f7acf1af-c0f1-4911-b436-86da5331e297", "sighting--e28129ed-b487-420d-889b-2005b91bcb28", "sighting--deb602d6-bb30-484d-b94d-358ff5ab4537", "sighting--49ddd173-b0a4-4810-88be-75825c3302e7", "sighting--174cef7c-e102-459e-9c30-d136bb10d6db", "sighting--02bb8a37-816d-470a-89bc-abc024666c41", "sighting--79b15419-b743-4b44-b1bc-79eef8ff21db", "sighting--5ecd6dac-5bf6-4b33-9be6-fe638ccbfe71", "sighting--61565ce4-3dc8-4731-90ec-d68372296fad", "sighting--1cd6c73f-b3a8-4e08-a6fb-c01cefb4f3bb", "sighting--92b3bb0d-78cd-4403-945f-69081ac2cdee", "sighting--1080c97a-f25b-43ad-9353-cc0f5bafde54", "sighting--cc516617-73ef-4775-8e93-1441a4c4bea8", "sighting--ea45b801-8061-4b9f-8bc7-75f5287fabcf", "sighting--43336fab-a3c0-406e-9900-531b6667e649", "sighting--3113c2dc-4bf9-4785-a983-a70f7518a489", "sighting--a211ac2b-9753-4a58-a415-078734fa38b9", "sighting--9c0ef9d2-b103-4524-a377-2864916aa00c", "sighting--fd147682-4c9c-43bb-8472-419c127bd29c", "sighting--02c9eba8-965b-4d02-8922-fca920e15d08", "sighting--bd35fc4e-3353-4697-bb3a-81fd96b54e8e", "sighting--4de3f8a2-4c6f-4a27-ab3b-37d78bc995f6", "sighting--c8a6043d-31e5-43d3-9cbc-9d24b4953774", "sighting--8278d457-c09b-4535-9ca1-727062dcbf9c", "sighting--39d65ba4-87e1-4c3c-be8b-42257f0040ff", "sighting--1c33ae2a-9901-4a75-a8b9-7c1f7ff392dc", "sighting--cf45b5ed-5709-446a-a625-ced9365b3ec6", "sighting--4ce306de-e76b-4cfd-bc0d-5df747bffa1e", "sighting--6c5da48b-beb0-4e7f-8f59-4652a8ce96d0", "sighting--a2c4d147-a01a-4414-8050-d12b0b756acd", "sighting--c232ffc8-02de-450e-9178-6e6edf8d44f0", "sighting--e06b1ec7-b4f7-463b-9fbf-be76d9c2b975", "sighting--e44bcdaa-fa92-40fd-bcde-1c59e7bc6539", "sighting--3e3941e5-12bb-4100-84c0-58017100fa9d", "sighting--bbf8ddf8-0224-488d-a58f-8f9ef10cd483", "sighting--e43a4f6c-3af6-419b-896a-3c8a7af7ffad", "sighting--b000465a-fe68-4b0d-885a-53340dd3ac38", "sighting--7270028f-374a-46f7-80e7-4c6c61b169c7", "sighting--d7f312f9-6249-485b-a8d2-24f27727e5e5", "sighting--d329af99-be6d-4978-8c56-2fdc682bcf72", "sighting--d7fce682-169b-46fa-9dc6-e7fd829bc3fe", "sighting--a8c8fe75-9360-4354-98a7-59aefa6a9ae7", "sighting--f284fc9f-e3c1-4b96-bf1f-93834ec12715", "sighting--e8478de5-2bef-4ae4-8a4f-4ed321ff41fb", "sighting--7be47f26-5d34-4e1d-8b92-9fb861be0b24", "sighting--0649476c-f588-4b37-99c4-89e6ffb978ff", "sighting--9ab0de37-67ad-47cc-aa3c-56c3fc5c3b6f", "sighting--3a731b2e-1420-4a6c-a907-d3400212c07d", "sighting--b8561fa9-6ed6-4cb8-8d68-cd23bf3cc158", "sighting--c9ae2ad5-8f8b-4f19-9fc9-64e178f915dd", "sighting--615efe4f-fcec-4eaf-bdc4-a413f6eb2aec", "sighting--293cb40d-ce21-4599-9e10-d6f7943ea777", "sighting--bac9240f-fbbd-4dbf-adf6-7a2b4030b950", "sighting--4cdbe37c-eaef-42df-9566-fdb696a769ba", "sighting--1e3449ed-9336-4f30-a20b-adb817b731d9", "sighting--f3236b2d-45e7-494b-b69f-47c2f5b53e4f", "sighting--e8e765c2-5969-4db5-8ec8-bfbb2610ef0e", "sighting--1626ec95-060f-4196-916a-ffd0aac99fc2", "sighting--53fdc575-9edc-4a9c-9180-37784865a0fd", "sighting--6563bf34-f264-4d95-af5a-ac0627327272", "sighting--edf96f29-117e-42de-bef8-fdb945ccfa6b", "sighting--486c5e15-ace8-4cee-ab37-018764908d36", "sighting--efe17ea5-51f4-4eb2-b274-884fc3374e5f", "sighting--1bd38172-b2d9-4e33-9061-34876a3b8cf1", "sighting--093b3b6d-7d39-47d1-a3cb-d09370bb9716", "sighting--9c876be4-8919-49a5-a5ad-b3067dbed7a9", "sighting--e7ad1727-1872-438b-aa3c-acc825f2b1ba", "sighting--33325452-7def-4224-8cea-60053e9bbe2b", "sighting--7dae906e-3a6e-4a06-967f-fd841823903c", "sighting--82b24561-19f5-4002-95e7-22931959420d", "sighting--bb99f02b-fc21-4bd3-8c89-5f36bab268e7", "sighting--36a2d473-f1bd-410b-9c3a-bbe56952b59f", "sighting--0d5724fa-afe0-41df-a864-499966e81a64", "sighting--c1015a23-509e-4db2-b2aa-d5c0b67a3b41", "sighting--57157660-ddec-4ef6-af67-116e8f8d7fe2", "sighting--089c7c12-90ba-47ff-be3d-b1c717ac97aa", "sighting--d82e9e94-9cd4-4682-a8d2-29aba43909f0", "sighting--b890d21a-ae2d-426a-9dbd-808bbdbffba3", "sighting--54c09778-6230-445a-9d73-7001e06e8a4d", "sighting--46fce76d-b55d-4224-a3c4-38f966db04a3", "sighting--f61b1d85-d554-41cb-99c5-ed372d697da0", "sighting--713491f7-6907-4ef0-9542-33977cf15399", "sighting--01302735-e4a9-40e3-b86c-22851655ea97", "sighting--6fbb47ee-6a03-4ca6-925c-390e347fa05a", "sighting--d5ca2550-0323-4093-a0ba-15278383bee6", "sighting--46805efd-298d-4729-9681-4d313528a6df", "sighting--93213ba5-a3cd-43c8-b7b2-5b8db0874801", "sighting--fb3d0613-2ec2-4378-a442-f0d755c8fe9f", "sighting--60a6ddde-72c5-4b30-bd66-2692251498d0", "sighting--de09410a-ea46-4bce-b13a-7346f241ab65", "sighting--58cc82b3-7b10-41ae-971c-142a21c84ae4", "sighting--3c5e27e0-3623-44cd-b19d-65fed43581c3", "sighting--7d58f29a-f9ec-4aaf-8458-6dab71a01798", "sighting--a4652929-9485-400c-89ed-14c41921e495", "sighting--4c9161fa-7813-4f9b-a1c7-a0d6156b41c7", "sighting--a2e1451e-3d53-454e-b05a-6d02b067789d", "sighting--dde62191-7123-4653-8120-82face0cf667", "sighting--e56eaf95-acc0-43cf-b854-089552c47d74", "sighting--13968133-ad23-4ea2-a1f3-30b91287bf8a", "sighting--d78057dc-affc-44e1-a58d-8eab25662f55", "sighting--363cecbc-ca5c-4ec4-a381-2a8bdca16057", "sighting--6ee7e2c7-d875-4e31-a434-bbf6a4a7dc67", "sighting--7904331d-4b5c-45bb-962b-82535ba62e5c", "sighting--c353aac0-42b8-46cb-a177-ce713564ddb3", "sighting--b45ecc5f-dae8-4830-9acc-f8bb3324d47a", "sighting--8e0f1667-ac62-449d-a0b7-7bb370c3d57e", "sighting--87c8f52c-d412-4071-947d-5cb3c50f33a9", "sighting--b491bb66-399f-48d1-9138-e62cf4ee8da8", "sighting--a50a0400-695a-4eb3-b892-d4d7f4c7ad66", "sighting--6aeb3bc4-0019-477d-8664-cbf2b069a46d", "sighting--4f8369ba-66c2-4c2c-80d7-79c5fc072c4d", "sighting--00c55db4-e28b-4bc2-b4f2-bd530cfb3035", "sighting--6359fc31-76d7-4913-80a9-22f59d39b845", "sighting--b0b80e92-0911-4c3d-8100-51145ed461eb", "sighting--ffbe2ac5-2dbf-40f3-9d51-c6c3ed89e998", "sighting--be4787ab-addf-4479-8c80-ec1b026c369c", "sighting--0347e858-6c40-4dc1-a1fe-bfa3b99d2b6a", "sighting--89d93551-23f4-4db2-b218-ccad02b91984", "sighting--906fbc63-14c0-4a36-8faf-583b2d32f878", "sighting--88c14e6c-b349-43ce-a406-79c060475978", "sighting--205b7953-3f20-456c-af29-68ab340458c7", "sighting--1414202f-45d4-4863-a407-284c72d9b77d", "sighting--6e6a04d7-65a2-4643-b8b8-b25f070a7f87", "sighting--b13224ee-0e0c-439d-a8db-a24eaabc674e", "sighting--38af5076-9f0c-42e3-9232-7334fc4ed71e", "sighting--6626db47-4cba-475d-94fc-90acaf4c3d6f", "sighting--5ec33e04-4abb-4c8b-84de-95c0a8277032", "sighting--edc448de-0c76-421f-8f2d-292f42f2f674", "sighting--2a2c10ff-79a5-49a8-9081-b4b97bdbd6d5", "sighting--d1388730-633e-4ee0-8294-5097b87930c0", "sighting--a6727e40-3ac5-49ee-9aae-b72b881ceaf3", "sighting--1392e5e9-204a-415e-a359-46576fca947d", "sighting--2b96fe8e-e385-49dd-89d8-0fa79cc9622e", "sighting--39958b19-f400-4aea-b096-90b21532e167", "sighting--8746eb4a-d69e-44a9-a9b3-77ed3b5a4ace", "sighting--b5100869-dbf1-4e49-80e0-aad5bfc5ca11", "sighting--c9a7b13b-133d-4a4e-b7bd-f037f1e736a8", "sighting--3352acba-bfb1-4f4f-9471-5bbf5974c79d", "sighting--30a36002-ec85-4a37-9c54-f70c2d40121c", "sighting--9c41391a-0a13-44fa-90bb-1930517c2dc6", "sighting--b534e32f-71c9-4aab-9ea2-84fe5ee1999f", "sighting--95fbcc4c-e14c-4a27-a58b-57a18daa24ce", "sighting--4bd66bf2-ac90-4898-80be-3b38d158a1c7", "sighting--095f5579-ffe1-4c98-81b5-5d18aa14ac97", "sighting--231e889a-5cd0-4b77-975c-8936aad8372e", "sighting--19f15b7a-ace9-416e-92bb-5836d7b6371c", "sighting--ce368b63-3c5d-4766-abc9-4b1d38e8f17f", "sighting--c3cf02a5-9b58-4f4b-9b5c-f93f229a8e23", "sighting--75d323a3-5882-4282-a240-554a26393c28", "sighting--2636489d-dc79-476d-b7e2-e9a3ffcf60bd", "sighting--a484acce-b5dc-441c-ae99-1d5880fa2365", "sighting--d84ceacf-77c8-4ea1-8609-3585a6e4989e", "sighting--ffb109eb-c793-4c5d-9bf0-37b56275daab", "sighting--e0b3cb21-255a-4e08-b268-0749a7ff4c8f", "sighting--36ed7ac4-f062-4956-b98e-192349fb92d1", "sighting--64d57478-dd34-4540-a874-981bc2af0fae", "sighting--74d42d75-ebcb-47e6-8997-01dcf7a4cf6b", "sighting--6cba0d72-3d24-41ff-bf86-baf9d56fffb7", "sighting--182a8937-2baf-4410-801b-2656638d7b35", "sighting--2d9a0b23-af6e-440f-ba37-557275e7a30f", "sighting--259758e9-e181-4932-9d6f-71e2df11dcb0", "sighting--57d112e8-93ff-403c-b8cb-8ee9c2e43486", "sighting--0bf81bff-fb66-4d9c-8e33-8636ffb8cc96", "sighting--60ba26f1-ce47-44fb-ba33-75aa670bbe08", "sighting--44d9dc7b-d31a-42dd-ab70-5c7e02833e82", "sighting--991b7d2d-2233-4358-bcc5-8ec1fe5056ba", "sighting--92d586fd-093c-48c6-a3e3-f61994836ea0", "sighting--b7e64d93-14de-415f-b63c-efb59762c2fa", "sighting--0a0e0126-b6d6-41ca-9a89-9a3204787e5e", "sighting--1e71d300-f314-4248-bb4b-5275082aee8e", "sighting--84dbbc0d-574b-44df-931d-1e16a0768dfb", "sighting--d363865c-fdc3-41df-acc5-db86846fa08d", "sighting--3ec0ba1d-dcb0-47ad-ab80-aab6710f98e9", "sighting--dcc226d6-d552-46e4-9441-949109a7e405", "sighting--61653c1f-13b6-4757-93b3-f68de4f47a9f", "sighting--409d0a88-4e98-4964-a504-dc5546589176", "sighting--2a34f724-c532-4aa4-85ea-2c217925932a", "sighting--85ac6972-8136-4ae0-9381-99261198ddac", "sighting--0358e907-0e1b-4a16-b3bb-a78fddccde4b", "sighting--c6b781f1-bb46-4cb3-b3de-7ca343b0e141", "sighting--1166ee12-7fdf-4ecb-bbc3-4da5a1b9d512", "sighting--79242b9f-e083-407f-bc1c-1ac6eaf371d3", "sighting--6f11cfb9-b52e-467a-a79d-8fbee752ea6a", "sighting--452e4b30-9a9c-45a7-953d-dd77d89916d0", "sighting--ba412ad8-e1ff-4f5f-903c-942d743bfba3", "sighting--b65ff973-19c6-411d-9a79-b906e31f388e", "sighting--3b286c5a-17bf-4c20-a3f7-44b90010f92a", "sighting--0ecc990e-6b01-4447-9aca-a03a8cb7facb", "sighting--795c3aee-b228-4b62-8f85-acfc75c54165", "sighting--77d683e6-778d-4203-9c95-8be27384352f", "sighting--5b1082d7-5d4f-489c-bee8-31d12ecef15e", "sighting--3c3c1673-1ee3-40a3-83c9-b7a37dfae45c", "sighting--724f1c3d-24e7-4108-8f33-f9b7eb119c8f", "sighting--9a9cf93f-58aa-4032-b635-627175b7d0a1", "sighting--d49ed4ae-f04f-465a-80aa-351fa86875bf", "sighting--e51d4ab5-5d1a-45eb-9a73-f48b27f42cc9", "sighting--51c6ef34-2c02-4066-adf9-80839d1e38bd", "sighting--a2ccc61e-59b2-4e08-8edc-60f12aba3831", "sighting--cefab0f2-a2cf-4bd9-b652-d1183c955af3", "sighting--aa0d0f34-1cb6-4e8b-b051-161353e9511d", "sighting--c35b85ca-1cc9-4ceb-ba2b-5dad306e5fd3", "sighting--9d61fde7-82e6-4a76-a38d-4f24cc336beb", "sighting--08a8c85b-54b7-4ea2-9785-3dcd7057abc8", "sighting--94097a7e-6714-49ed-89ac-fce1c2692894", "sighting--925e27bb-2f9b-454c-a27e-d1f7bb9b1ea3", "sighting--2942cd78-d03c-4708-ac92-c382712c2674", "sighting--1f8c29d7-8dfd-468b-b13c-cda3719496a0", "sighting--1e6d6161-7b35-4eb0-b071-684b99f636d2", "sighting--8f3ae285-cdb3-4ce1-9fc0-27d792eebaaf", "sighting--4ea9570e-6fe1-45c6-91cc-a073e7aa5253", "sighting--195cf37b-180e-45d1-ba59-480c49ec554b", "sighting--c843b030-b0bc-4213-8838-c38ec48fd771", "sighting--22fc664e-6fcd-4fd7-ab16-59143831991b", "sighting--3dda8ea0-8039-47a4-93ee-fe6ab46f41cf", "sighting--af9317c1-0ad0-4aa1-99ee-cf5abcf5c2e7", "sighting--cc43099a-63b8-48e9-8dfe-2e0076c14907", "sighting--f71a3973-78f0-4adc-8b91-07dc93071ff9", "sighting--18d1c9a8-f3e8-4ed7-b533-cf90e38306a0", "sighting--b5c28932-2f3d-4fc4-a59a-10b4bb7ca15f", "sighting--1681cc56-b188-4181-b327-7407b43770eb", "sighting--a72e48dc-a715-41ff-91e2-37b0a8bf0266", "sighting--a0cc8f0b-42df-4840-9ae1-cb798a5e6b3c", "sighting--2721e23f-3092-4f08-b9a5-1f067bb7ff37", "sighting--f32b1a75-464a-4495-a4ad-7970cf15e72f", "sighting--833f3a8b-f698-4980-9c4a-9bb4e37271ee", "sighting--c2804765-3ecb-4d73-a5b5-f57893854f30", "sighting--ed5be30f-9dbf-4af2-b13f-514dd24fc105", "sighting--cbf1475b-92fa-4cd3-af54-5c8eefa455da", "sighting--46af17ce-852b-4f29-8028-cf97891e8131", "sighting--2819097a-2a33-4b6f-bc17-5aa304d8afbe", "sighting--357f7adf-acce-474d-8ccd-66a5f3d490ce", "sighting--0310dc1f-c61e-4852-bfaa-c7aa5231e8d6", "sighting--b04f8a51-e0b6-4ae9-b541-52715323f908", "sighting--fcd67ad0-516d-496a-acf6-0ed5bac93819", "sighting--c34b2a3f-cbf9-4edf-85c4-3dfbd08db6eb", "sighting--e3f0317a-6a93-45ab-8517-433fb75a7763", "sighting--494a1612-6cf8-4cc7-8abf-cb699bd3ab82", "sighting--aaaf209f-706c-41a4-a62b-6ea30dd62235", "sighting--f3566274-6946-41e9-bf71-37be672e28b3", "sighting--ebe92ace-0d04-45a8-9204-4455a67e9405", "sighting--3351f741-3493-47ec-9a4c-80d4e38a2ef7", "sighting--a59130fe-bb2a-4cbf-b88d-59276283c1aa", "sighting--8c7eaf44-d6ce-4c88-9f5f-7ec038a5d722", "sighting--b9a57611-6cc3-428e-8374-05977ae347e2", "sighting--3a551547-ac8f-49d5-9411-9463dcdc86ca", "sighting--367e6955-d611-437a-88af-923f15e56c2b", "sighting--39e2bdf8-8fdc-42fc-869c-0a5c2f613310", "sighting--fb8135cf-7afb-4e79-8b9b-f7c3e4b77fb5", "sighting--572cf383-df79-45a1-b8ed-eb2d9dd82c2c", "sighting--ddab7d38-c6a0-49d9-8222-7a8325516237", "sighting--b10a8893-4712-4b2c-bb8b-1785744d8701", "sighting--1c2bb20e-e124-4fe1-80d5-a44ce49521cb", "sighting--72a133c1-0cbd-4ee3-b4a9-2092b666097e", "sighting--3012512a-843e-4f23-ba0d-be5c55b2c7b1", "sighting--dcac4649-0343-4dd4-be54-853dae904a8c", "sighting--3b6a47c7-f282-4b33-a6f8-1cd7d184c851", "sighting--fe72d5c5-5287-47db-ab79-f01f98b71a34", "sighting--5b7cf350-4cb8-4244-a180-6460f54d53d1", "sighting--78c8accc-b5a6-42e1-bccc-86eae8241f4d", "sighting--0659126a-fe64-407d-831d-36e9927791b7", "sighting--a837993f-d54b-477e-a67b-bf286fe9ed50", "sighting--782cce35-3590-457f-bc4e-f24fa2f320ac", "sighting--ee525c69-88bc-4fcb-890d-77dfce42b38e", "sighting--86a33639-288d-492b-8344-ab6265f294bc", "sighting--dd1507bf-7c6d-4d83-b5fe-56344bf33c10", "sighting--e3e785e9-ab96-4f2f-9ebd-186cae97ff23", "sighting--05499ab6-9b35-4e47-916d-47d921dd3142", "sighting--fd02e09e-d3d7-40f4-a5ac-7b3d1f1b7f9b", "sighting--ee2ff93a-b788-4b9e-ba8a-81e3b47b4fb5", "sighting--31f93b05-3506-4b4b-a7fc-c3ca41d46fc9", "sighting--4fc4abe3-7ea4-4321-8316-e5d5c5644e8f", "sighting--ecee129d-29a1-49b6-87f4-105bad69be61", "sighting--8792767c-201a-44fd-ab0b-0435970e7011", "sighting--5c0e63d5-e0de-4487-a10e-8950324836d1", "sighting--6f9082a5-4094-45ea-8443-a8bc340b8f22", "sighting--b0d4f502-a40e-478b-9649-c9e24e0a890e", "sighting--5645659f-ec7f-499e-8653-53562b035231", "sighting--225c2202-1260-41a3-8870-1e820c8f1016", "sighting--81a7fef2-d4be-478d-86bc-6ff81037e812", "sighting--9b3457c1-4801-403e-b1f7-bdae11fa4a91", "sighting--fc3c5ec1-7f6c-4938-9bd0-c83b68c674af", "sighting--0c84fcc3-e90a-4b58-b9c1-8cf23d070d31", "sighting--b00a490e-c122-4954-ab2f-b4fc2beb2640", "sighting--17a036fc-91ce-4f49-b353-b1dbba907894", "sighting--53ec07c1-68e2-4547-ae35-ff0ddc7395f7", "sighting--8864e310-362b-49e7-92c5-e5b9a6b1c99f", "sighting--ad4d2ba4-3fd7-4872-9cb7-dfb63396dc0b", "sighting--cfb7fb35-e1e7-4c5c-b358-f3c26aa69bb8", "sighting--c2b55ef4-2e91-4cbd-a92e-5bc484cffb2b", "sighting--735b9c20-070f-47b2-8bf4-7444edc1808c", "sighting--56281511-9517-4a83-9a1f-1a89a16fec4c", "sighting--63b5d190-7355-4a27-a676-c32ad44d6407", "sighting--480fb3d1-6ca3-4b04-b191-b687118743fe", "sighting--960ba967-11f7-4006-a6f6-3bda975ce055", "sighting--49d875d7-8efc-4e37-8ee6-e4bc6d73daf3", "sighting--9a19fe01-17dc-4297-b39d-4bfcc9f342b5", "sighting--fb8bc19f-1aed-41b2-aa32-389d0ccfeb2e", "sighting--58923b2f-1e9d-4c45-915b-d2cd4b3fd2fc", "sighting--9cf32d41-24b3-4de5-8615-7186228300a0", "sighting--3fc6d301-b105-4788-9aa7-d84656009989", "sighting--b6324dcf-4b68-46d3-9e00-4260e7c79199", "sighting--3718e4c2-2bbf-419a-97b1-ce9d1487ad03", "sighting--d9ece1dc-decc-4781-8ead-20176bc09089", "sighting--26f418bd-674b-494a-956e-9f99c89a73f1", "sighting--775ff216-e4d1-46de-92a8-b2a657412de4", "sighting--78881ced-282e-45b1-89ba-2e51190c3570", "sighting--3183527d-f6ae-4e8e-8e90-1c600db1e2ab", "sighting--1b444351-2aa3-495f-9dd0-27eea9d54b0a", "sighting--4bca9e0d-8a1d-4c1b-943e-60976715ab30", "sighting--90a53fb3-b5f9-498b-8ae2-b411dba76c35", "sighting--ecc53b0d-00fe-451a-91ad-903597bdf5ea", "sighting--e5b5759e-8c36-4154-b063-9a373c6e73a6", "sighting--dbd5932a-9396-43bd-a807-9676cd2d1b3c", "sighting--ba6d72a5-10b1-4395-a66d-a4ce64b123ed", "sighting--e5ef30e0-1571-4e25-b852-2d0608f9a4b0", "sighting--43587e79-a3ad-4e0c-a63e-5ad7e853e490", "sighting--24b71004-16e1-4aaf-a8e5-dfa33a35d46c", "sighting--b28f1aed-b32c-4d4d-90af-67baff747098", "sighting--a9422478-e125-4f01-8c4b-f5abf4f2915f", "sighting--405350b4-cf96-43a1-994f-35b15e9df447", "sighting--678f822f-b2f0-4472-a34c-937e7fd68249", "sighting--e62ee125-2048-4ac0-8c70-58c7b33bc579", "sighting--4c8a4a22-0aee-470b-8249-536c937b836d", "sighting--dfa2d5f8-db75-46d1-9865-168ac644e113", "sighting--c6743f64-60e2-4688-92cf-6caa2514867e", "sighting--b556732d-f76d-4779-8059-4a3aec09c6e0", "sighting--6f282a06-0ad4-4677-92b9-637352f8adef", "sighting--cf5b7c35-5050-40bf-b2a8-235375224f74", "sighting--1c48988f-5859-4bcd-b428-e8a9d74ddcba", "sighting--5249d35f-35d2-4099-8eda-25f11880f6ad", "sighting--ac2f7779-73bd-4068-af3b-c6bb40913b0c", "sighting--a2f91e59-f78f-4e1c-940a-047869527e4f", "sighting--b890b717-5f2c-4af0-8de8-c7c34cdeb9ca", "sighting--ee479c7b-0a7a-48a8-88e5-796f4afefa6d", "sighting--0027ea42-e556-41c5-9aa1-1b844b1071ef", "sighting--6fe352c3-a36e-4b0a-b76b-293a1771e521", "sighting--58bce822-a3cb-4131-8fa3-a6a51fbea76d", "sighting--bb2d2585-585b-40fe-b66f-7c23e11dbd19", "sighting--cdad32dd-2316-4759-a733-4aafbe009732", "sighting--a63ef5f4-15ff-43ef-bedf-602972b2bd6d", "sighting--9b22a301-6671-4c21-9371-63684e225131", "sighting--a306fcc1-b487-408c-957e-b9d9b7e590ea", "sighting--ceff36f4-bf63-4d5e-9569-4b69e335bd32", "sighting--88c6a668-2367-4234-8586-85051b406c30", "sighting--d4f5c1df-92f1-4c52-a0ae-9bf50c6096b4", "sighting--f0123ec7-2806-417f-bb03-a0177ab6e33d", "sighting--535e4e26-12b6-4d8d-b21a-73c48fb05045", "sighting--f0bfa220-6f9a-4810-ab77-b977d6791aac", "sighting--b20c0e40-9960-47ad-b075-1837c86a8998", "sighting--78e0e71b-92ed-4dad-bf5e-1dab2c389763", "sighting--b668ad0a-4ae3-4723-a1cc-b14a4d1a66b8", "sighting--11bd042b-a663-46e8-9aa3-5bcaed9d2058", "sighting--39ffdd8e-fa91-40b2-a039-a7c524171b68", "sighting--b0456d67-1b5d-4186-a2cb-62b44e9812c4", "sighting--e1a22ebe-75bd-4f1d-ab97-56121fb26d11", "sighting--4a7c29d1-f154-426f-b5af-859bac1466f9", "sighting--8727450b-4b33-41aa-8a6b-8c9a3b84ee62", "sighting--b69fb824-71b4-4430-af37-c32ce72dac5c", "sighting--bcdbfe04-2dd2-4240-b434-315e6f158cdd", "sighting--ad5b5cd3-eb84-4de6-a62e-e4c4c1f93752", "sighting--fad91d92-c2eb-4b76-9932-a906069699de", "sighting--4fff7c4b-997b-4496-a02c-9b6e03ff46eb", "sighting--eb71dfb5-442b-4dac-a824-582b7c45972d", "sighting--eb40f1d8-a82b-4043-9887-8d317d649605", "sighting--7a88d309-7a97-4f5e-b5ce-7f7d95f5e5c3", "sighting--85059ce6-5eca-4189-9460-580045a86de7", "sighting--34f3c656-5175-40fc-b972-95eef59aa042", "sighting--8f043313-a85e-4d31-a19e-54b30c93b55b", "sighting--42acf019-0ae4-4f34-b9af-d789e909badd", "sighting--59504b1e-6315-4391-944c-fe66e64f30db", "sighting--5d2bc2be-5790-4b8d-9828-5eba16084996", "sighting--0729b756-ae20-4ef5-8ae2-a282925fb664", "sighting--431c4cc7-c678-4fe6-99fa-a078bafe4406", "sighting--0d6c26b1-5e13-4f53-a4bb-c73fce2cd78c", "sighting--c169535b-f1af-49df-9593-eb472d7fae13", "sighting--16ae50a9-4657-4b8a-b4de-abfc38d5ec74", "sighting--c9a214fa-e70f-477e-b147-1ec6f3de83c8", "sighting--7cb4b14f-7107-4569-a40f-665421410b38", "sighting--27f3100d-d55b-491c-b40c-ad7ff501e434", "sighting--68edbb67-4056-4d08-8230-0b18369cac71", "sighting--5220ddd2-5d27-4aa4-8f1f-925d6fdbcf89", "sighting--b7e3a0c4-e556-464a-991d-a09404f3fee9", "sighting--f0e6c83c-fe87-495e-a9d6-14ceb2f2e2e4", "sighting--d59e3bff-41aa-4afb-b254-2f7c213e5277", "sighting--b2d84410-c3ae-4520-a7a9-2001abc13bdb", "sighting--9223d0f5-bc3a-4a75-9b37-4afff08bf1fe", "sighting--9a697133-feef-4aeb-abc2-f35369756c88", "sighting--7c00a633-7561-43f1-9b46-8718365e2878", "sighting--1fa5512c-3624-401d-b6a2-7bead25b3a77", "sighting--4a12ffab-e426-403c-988c-cdb2fc3faa87", "sighting--4ab4c322-551d-4ffc-b90c-92654442b7b9", "sighting--4dae1636-d282-46c9-8599-53e1f920eee6", "sighting--e1685174-79b2-40e4-9a38-5275242bda82", "sighting--1880d8e0-1ca5-40c2-9f1f-4615d7a9a510", "sighting--ce3cdcc3-b5d4-4f91-af00-37ed32beba24", "sighting--222cdc90-ad55-4d66-8400-742219531329", "sighting--f842309d-72a2-42a8-947a-fde49ae47615", "sighting--96da21b4-d05e-4ff1-9436-b2c2ff3eb626", "sighting--d80e84f1-dd96-4bc6-91e9-c91903a3cddd", "sighting--4078c6b4-1c99-4c3f-ad4b-997f2923fe8e", "sighting--fc4604ce-e4d4-43b1-9edd-771b1a8814f7", "sighting--a135859f-867f-4f79-8b49-af3f6a92b777", "sighting--d3f4814b-c69e-4ab6-810b-38cfcb143608", "sighting--a3fead66-b683-49c4-85f9-66cb9fb58147", "sighting--adb62fe3-4324-45fb-a7f8-51bc897f4d25", "sighting--37422980-c814-4832-9aff-c5c1d15eb9db", "sighting--607ca7b9-e07b-41e8-a2ea-fd3e2bed98c3", "sighting--8d340b55-87e2-460d-9d1f-50c73a404d77", "sighting--e9a96ec2-4568-4a8f-a3b6-3c574a2d8fc5", "sighting--b85cd806-a9d6-416d-b226-6d5861cf0139", "sighting--1cea30de-d65b-4232-be78-7b13840c8b41", "sighting--00309998-85f5-4e93-8f0a-782440e99644", "sighting--443511d7-715f-428d-a7ef-e64f36c30a87", "sighting--9cef33cb-d672-4740-bb79-dcdab1d11e30", "sighting--5351c1da-f6a8-4101-8ce9-bc07c017e250", "sighting--f23ac522-e25d-461d-949f-6c0fad787dd7", "sighting--bf73f1f8-bdc2-4466-b6c7-e2458f699aa2", "sighting--eff0f9e6-b4f3-4f8a-b42d-15961b0b8dd3", "sighting--6f3a4ac9-d89e-4cec-ba64-ec43ff0094ac", "sighting--9b1d2e02-7a93-4ab6-92be-2d28b09bede1", "sighting--dde20a9d-e4e1-4e5c-ae8b-fe7fbfa8cd31", "sighting--00d429d7-d49c-42e1-9893-45ed19e47f0e", "sighting--8465d8a3-0830-4974-8d30-97ed95a76f7d", "sighting--71aa1cd2-1a24-40e3-90d9-0c6d7b0c6aa1", "sighting--73708398-1a78-49df-b4b4-e138c3fd6119", "sighting--4978bf27-c2f6-43e0-a2d2-0cb601e0aa11", "sighting--96d6a097-770a-4e85-9602-5027986239a1", "sighting--11423583-31f2-4d3a-b8ef-93285fea1487", "sighting--23cfea38-103b-4afa-8bc1-cf5e37c1e777", "sighting--febc159a-b171-4dcf-b73e-dcb5b2518795", "sighting--1f596378-b187-4356-b4c2-1a99cec0f0bb", "sighting--f46cb516-e515-49c0-8083-9b8e3d6ace41", "sighting--e94eec2b-8d09-491b-9cb5-3611b31edc32", "sighting--d8c246a9-05b3-4b21-9fd8-5490a60a7e0c", "sighting--471f3b95-9795-4d0b-97ef-740bc577d191", "sighting--a74f49c6-b4d0-4bcd-8a2c-a79d617e1b46", "sighting--62939303-ed30-4e25-8666-e123600c6d3c", "sighting--b5c7d716-66a9-433e-a301-71f8f13ffd9f", "sighting--b303eb92-e790-49d9-aff3-ad9792ff1384", "sighting--3a6c27d5-17ce-47eb-b021-8da119126df7", "sighting--a12c8562-0bd1-40c1-9fdd-c82679c16aed", "sighting--2e22ce46-c83f-44cd-bb74-1d3929ff689d", "sighting--ed0e3998-50eb-459a-a10c-6487b4748441", "sighting--b629ce38-ad10-4893-ada9-49ad301da62f", "sighting--d01374f8-2530-4a92-a8b6-d32824c155fc", "sighting--ea2d8f7c-a303-455c-9188-235cda595990", "sighting--b8e34cc9-0117-4c8c-8b19-6c759ac5a488", "sighting--19bec9ba-4b98-4dbc-8753-082b203e1b0d", "sighting--bea114dd-7699-450a-aa5d-aa00a1952530", "sighting--cd58e667-70a8-4049-a299-f0a2b4aea6d1", "sighting--c8d2b009-7bc0-4589-98f5-fd01f4a40fa5", "sighting--9e2456e6-9f07-4452-8682-814e2c0c1a81", "sighting--287ca987-912e-4039-b5d4-d0d07b5876b7", "sighting--2986d0f8-0431-4494-97dc-12b978103baa", "sighting--729f6716-36b3-48a2-8aec-67db6f932930", "sighting--44a8fc4d-e852-4f61-9b1f-ef4b3e413a28", "sighting--0c80a2c5-c9fc-4f40-9035-2cb7e4c339ab", "sighting--fca9c532-372b-4a94-8061-870803c3114d", "sighting--7e2e3d6f-cdfc-460a-8a94-464f9a13e930", "sighting--3bf10cd3-ec43-4177-952d-e6ef4a5e50b8", "sighting--9b7dd18f-7848-46c5-8dff-cd7c957d2887", "sighting--91e884ed-06a7-4e31-880c-c6604dccdc1d", "sighting--ef865514-540a-4d0b-937e-c69ab6aa1cd8", "sighting--25f5bb81-f995-4049-8483-30c9f18d456d", "sighting--5bfb81bb-9419-49c2-906d-da16ac0df300", "sighting--d170f8c8-9da3-4aa4-b889-92379532de9c", "sighting--35327682-ba2b-49b9-ae21-c1ccbf6e21bb", "sighting--429e4b0f-da50-4f72-afe1-09111986396a", "sighting--82ac5e8b-57ee-424a-8723-06257ab9b6e1", "sighting--9b81f06f-c65c-4734-a6cc-9bfcd173240f", "sighting--80e26a75-01cf-4044-89d1-d0431d6dcb4c", "sighting--8aaf595a-07a8-462b-8f94-5afbd792bacb", "sighting--01446fbc-e9ac-40ad-921f-f22f865977e9", "sighting--00b94c64-6b26-4ebf-bdc3-bcb6632c486c", "sighting--f28fdef4-62da-4f7a-9014-716acf6a8cb4", "sighting--7c7386c8-2c06-47c3-861f-ee28263afc3a", "sighting--e0655052-e198-492e-a155-f41619845d1b", "sighting--b109874c-8c40-439c-bea1-cbf52664e1ad", "sighting--e166b766-7667-4907-ba7f-6ac4b865bdbd", "sighting--b255fcc8-f1cb-4e5a-84e9-eaa323661339", "sighting--f1e4303c-e166-4ade-a545-0e702e8829a1", "sighting--97298695-3f48-4669-ba1f-ca3469cb5aaf", "sighting--467aa70d-229e-47a3-9eab-455322f88fa3", "sighting--e0eaf416-55fe-44f5-a626-542a80c8af7b", "sighting--54ab6f12-8446-469a-a5b2-8c07e922e5d1", "sighting--2564daa8-0157-480d-b0b2-0960e0990e8f", "sighting--61f828fb-afdf-49a4-8a80-b47f7d88ee43", "sighting--9759c2f1-a03b-438a-8ec8-8e8c2795987c", "sighting--75cd13b7-07de-4110-a17d-f278c9ff7fee", "sighting--ea2576ee-e587-4744-a360-a8d502bdb029", "sighting--aadbc41d-31fa-445c-adf8-94c325fc2845", "sighting--3f5c4f52-7a3c-4df7-8aa2-206234d9a115", "sighting--5651ab7f-72f9-4796-b2f2-76b9e4c7ab1d", "sighting--19820040-14ae-4df4-b5e7-755d73cd50bf", "sighting--da74bba0-1da4-4f0a-ab7b-9dff4f68928a", "sighting--070c7200-5791-4f86-98e9-caebe7926740", "sighting--d7ad4377-0905-49f2-980b-597123afaa04", "sighting--5ab0f1e4-a3a2-44f5-ae9e-a3b35360fe65", "sighting--e69e7a66-a1ca-42f6-b4b7-8408029b9a95", "sighting--b393d2f3-b351-4183-83fe-e28d8dffef24", "sighting--a5c560c3-3c44-4dbf-a823-fa388ea9dbd9", "sighting--2da91e82-d594-4af2-b3e1-44f142a36c39", "sighting--8184fcf8-0da3-42d5-b066-af0a269c824c", "sighting--dffcc0ea-3084-44d1-8163-449cd48179d0", "sighting--f70297d8-c762-4c85-8d08-a353348beb6f", "sighting--70db4b4b-1635-42b9-9b6a-6074918932b2", "sighting--217211ef-ef37-4183-853e-25348fe57eec", "sighting--024ce1a9-f799-4676-8c70-232350be5495", "sighting--01439ea0-c35f-4fa7-8907-e496588c0af4", "sighting--104c56fb-035a-4366-a2e7-d3c21dcc7304", "sighting--0c606c4b-73a0-4851-85a4-1223f1997076", "sighting--3571f312-1d1b-4cb1-a024-fe92b5ec3e50", "sighting--03e699fd-b399-4b14-bf13-9344dcaba3f1", "sighting--fcd6780e-6b3f-4546-baad-7f714f8a592e", "sighting--81ca8cbe-71fc-49ac-88ec-167e3d70b341", "sighting--aa491ed7-378e-4110-8dc3-410b603baf19", "sighting--636b7d32-a785-436d-ba44-c555bcc4b65e", "sighting--72ca6758-2db8-49de-a814-ddc61da5f32d", "sighting--cd1c5923-b759-4a93-b943-d5df01d5cdd0", "sighting--71cd225c-ba61-492b-b7b5-167cb08fd9cb", "sighting--34d5f9a6-537d-4611-8b2c-cc4897aa8fd2", "sighting--53e489d7-a5e7-4608-a7d5-97d35f58b746", "sighting--c1e5bbd2-9bef-4955-97c5-fc8615322cf6", "sighting--a8edecf2-ce29-4efb-b834-a1bf9c9da23a", "sighting--f9e11f1d-75d9-4db8-87f4-813e08df5f1f", "sighting--b14e175f-6ca8-423f-ba9b-42080e07cffc", "sighting--48258173-4ef3-4548-81b2-67b5d0558886", "sighting--9b33706c-9afc-4d26-b826-31f538464fa8", "sighting--7886ffac-b43a-4a47-a057-d3bc0d9e0103", "sighting--c6d977c7-bf0d-4d9f-96c9-d92511b76d0a", "sighting--5bc17056-65ca-41f3-8d9a-9fd33f14c680", "sighting--71145e6d-dd80-4817-9586-e658cb224b3f", "sighting--cf432a7c-ca86-43e0-aee0-2a6d48b00466", "sighting--0f06ea9a-5102-4ab2-abc8-c4eb5fb514b0", "sighting--a62998fa-f678-44cb-99f7-c7b60bd09a32", "sighting--fda1fdee-d57e-4af1-bdf6-5075b06fc56f", "sighting--241572ee-cd07-4348-83e0-8aae743192f5", "sighting--d01992a5-e96e-46e7-b89f-a66f3fde4006", "sighting--108c04dc-3c25-4be5-80f7-cfa09e975e0f", "sighting--7b9e8cfd-baed-4e24-b0e8-617034ea4f01", "sighting--3c551745-7e69-4992-921d-8aa5e4404e8f", "sighting--dc283b25-cb8b-4659-98f2-dd2fb8c4d6e3", "sighting--86117442-908a-49b1-8b04-74e951db3b5f", "sighting--1b487ddd-dd34-4a9f-ae12-c5862eb7cce6", "sighting--58aacf9a-935b-43fd-9a6b-2227b7cead14", "sighting--e3b26141-7e50-4d69-b0e1-794d8a22a7cb", "sighting--86a626da-4d4f-4484-aa2a-e0a63026b034", "sighting--36825ecc-0da3-4b3a-8873-3c6831da624f", "sighting--c2f31e51-3999-4b46-bd66-41e2018eb468", "sighting--604b512f-8dde-4f06-ab23-6bd1a061369b", "sighting--1f6cc58d-d706-4868-ab9d-9deef1be44ff", "sighting--54029735-09f4-4608-94c4-e94c2564fc06", "sighting--c2facf32-af1e-442f-a141-2839e67ad5f3", "sighting--9e14185e-0642-40cd-a55a-6aa2ee8c9069", "sighting--3ace29b7-092f-4917-b2c1-8c9996c19254", "sighting--bb561931-a7a2-4dbc-aab4-e8540613cc1c", "sighting--f6355781-f5cc-4849-b4ac-49b71f425e37", "sighting--590d78d2-42ca-4829-9f30-60b61aeea6ab", "sighting--80bf4524-a839-412b-9627-287981b298ef", "sighting--8c4eeef7-75af-48e4-b63e-0514b486c7ed", "sighting--38e46641-6f5e-4a46-8ad6-b5d471c4e484", "sighting--e481c232-c2b1-4bf8-b995-14c6c9f125fa", "sighting--ac98ad8f-d149-4d2c-870c-ad055439b025", "sighting--9da5d9a0-ab05-4474-bfec-6b49f95690ca", "sighting--454bcd17-f00d-41d1-92e4-2339559faf9b", "sighting--21fbe88c-9a49-4c6b-9ceb-7da447020804", "sighting--03c19caa-f99a-45df-bba6-c2407609c1b2", "sighting--8e1d2c45-4829-460a-8c33-ac4a82ac725d", "sighting--3ee98125-bd70-44f7-8f0f-7ca015ad82fc", "sighting--4e277fad-1aa5-4aa0-8215-b5232ff6aa82", "sighting--224ce83e-8b71-45f8-a8cc-2356a90ceb10", "sighting--40f8c125-a3b4-4188-9894-b35f7dc17ae8", "sighting--85a660e6-7c1c-443a-b6de-22e377d70f6e", "sighting--96dcd131-1cb1-44e4-8282-074685712091", "sighting--9933bce9-ab6c-4450-821c-7a741ccf6a2e", "sighting--d9e272bc-8322-4923-8f11-88337fc10279", "sighting--f5c45223-5823-4f71-885c-bf3ff9f117a4", "sighting--7f0478b3-9f16-4f52-8373-68523b0879c4", "sighting--2052252f-97a4-4d3b-87a5-0a1da0733d81", "sighting--94067e6b-8a24-4c8f-a6f6-87a102b92687", "sighting--2f2e0ffe-dfd1-47ad-a745-d5cfd9b80e95", "sighting--8f0d7600-dfbe-4679-8917-ac2bcef32229", "sighting--dfdfc033-ad02-4198-af75-1c9ddf2014d9", "sighting--5f986675-2a1d-4098-bc69-4dd471de9f5b", "sighting--f61a6a97-317f-45ce-af97-5c4237b788bc", "sighting--8cc81714-65d1-484e-a718-79d1ef6a9daf", "sighting--7f172541-5216-4712-ad64-f80bdd09f2ed", "sighting--4a39110d-2140-4f00-87e0-f5b7656ee633", "sighting--7cb168bd-3a60-41e5-a5a9-993d2e704676", "sighting--ad7b23d6-a3b9-4526-8e03-c04077b01b66", "sighting--f151cce7-d092-4f62-be17-aa38cf422661", "sighting--5f956b06-e271-4a0c-ad96-af08673023b7", "sighting--9232be00-525e-4f5a-83fc-864386f33fa7", "sighting--5857b42d-1053-4cb3-9075-727d352b229f", "sighting--436b0aed-2005-4522-aafb-7eda8e563853", "sighting--ed6ba1e5-ab60-4043-8510-499e3bb98778", "sighting--563eeb1a-1e2a-4a3b-95a3-573a54f07c19", "sighting--5aba7158-cc30-4048-b231-f2995c341f37", "sighting--bdceb4ba-2f16-4743-a71d-88c816e297a9", "sighting--12588283-4225-4ad4-b4c0-e8faad9f98f0", "sighting--d126ebc7-fe98-4242-acf1-4085ccfe98bf", "sighting--2de621b4-6a3a-409d-8b0e-764148e8fd78", "sighting--c1e8f34d-d67a-4c41-a1d9-3a2441fa0038", "sighting--9091a8ac-5bda-4792-9015-aa19f2a9b2be", "sighting--1650cdd5-1d43-4782-ab2d-f006e2021b2b", "sighting--819a0373-9ef2-464f-9fbb-8251f3e3bd4d", "sighting--e2765e39-44ed-41d9-b11c-83b333e16192", "sighting--c5e64baa-75b0-4241-b739-bf107a2e1fda", "sighting--bac5c4d5-631e-46e7-9ea2-6b7669224c12", "sighting--f0d27723-e6a7-45e0-8818-1c078cfaec76", "sighting--b26e9224-b380-4876-b445-ff2dec9fbe3d", "sighting--9ff77a75-638e-4aba-864a-daae86700bfb", "sighting--307d28f5-923a-4193-8e3d-a29bc41edba4", "sighting--77380539-ccb1-4f11-8261-956d94252945", "sighting--1de347cb-2953-4753-a093-8d9b9fcad5bb", "sighting--85e693fc-6d61-47e0-acce-33b4f24d01cd", "sighting--0d1bc46b-7ab3-4ced-80f9-453a529db197", "sighting--58412e39-e4d1-4a97-84bc-3a8c28e59bd5", "sighting--14af0fc1-9819-42fb-ae49-f817b04d59e7", "sighting--5413a8f5-a5e9-41ba-b20d-ec46ff8837e2", "sighting--58adb2d1-1414-456c-bdc0-866afbc47ea9", "sighting--3ebc692d-e24e-4d1a-8cbb-91a7bc2f6916", "sighting--04457adb-250c-44ab-a45e-6a0873c608d0", "sighting--7a756b52-3e9d-48fd-9bea-668d21c63847", "sighting--c8363a72-bba5-4a18-83fe-c4970172665a", "sighting--b5b2a958-dc86-40a9-baf0-30480a808316", "sighting--2740b7fe-9460-4f8c-a53a-b6b2e436dfcb", "sighting--40273740-af01-4ccc-a0a8-2b3507c0c954", "sighting--9bc84ce6-c761-499e-ba3e-663686cd6c0c", "sighting--825a3de7-20c0-442f-9e63-a449f553048f", "sighting--a2a7adcc-6fd0-40eb-ad4b-eced2e233b96", "sighting--025fc0ca-bfeb-47b7-8c78-657bb690d166", "sighting--b8915f0c-0ca4-45d9-a478-9f83f22f3493", "sighting--51d28c61-3334-4a18-b4d2-b5e5d2511551", "sighting--04827328-7016-4e9e-8e7a-9ebc9ab3ed2b", "sighting--7fffcbaf-ea17-45d2-92ac-b92778b4d43e", "sighting--7a300fec-a9a7-4809-82e8-cb95e908df91", "sighting--31428941-883a-4ba1-851c-5ae8a03f8f88", "sighting--80b811bd-22a1-42e2-b51e-44fa122e8486", "sighting--460f677a-5159-4a27-adcf-db4403f0ae6a", "sighting--a4cbf63f-e280-48f8-bc0a-cf8525073067", "sighting--ca1a7835-c7ab-4d6c-ac0e-ebcb9bfba92b", "sighting--01275512-23a5-43ba-a367-91ccb7265ad1", "sighting--22351785-8d4b-4f3d-97ac-705e86db4bcd", "sighting--e9a9bc2c-b990-4cf3-a2f8-967f9664498e", "sighting--9c01007d-6f9d-45a8-95a7-69df831bfe42", "sighting--909a582d-d7b1-45fe-80cc-243f0f8ed40a", "sighting--612a57bb-79c7-4f38-8eea-98a43038630f", "sighting--0f85b058-6967-4e91-b1b9-9f464c939b76", "sighting--03282775-a132-4edc-8480-9b4095aae495", "sighting--cada10ce-0540-4ad2-b1a4-994fa55a05b8", "sighting--c8a755b7-a11a-4bd3-ada7-820596ffce5b", "sighting--d667b54a-c27d-405c-bc72-b8c65ab7b5e1", "sighting--866a3a1d-f803-48b1-8e54-a3c9cd80088e", "sighting--e78a3849-1365-4b12-9da1-3581c35db9b8", "sighting--ca6b026b-fbfa-471d-95c5-ebfafa671ae4", "sighting--bc90ed70-f073-4b3b-b9ce-67cd0812c6bf", "sighting--bb6cec21-2900-459d-9849-48095e8f0a67", "sighting--809c4d13-7a0b-4b71-aa59-be4c49065020", "sighting--4b7a4d9d-5c33-44dc-850b-3f7ff6e8dfec", "sighting--d10c574a-3017-45d2-b3d6-0ebe8f72ef95", "sighting--13216ee0-2ad7-4b29-9225-2a737075cbd7", "sighting--964b6c46-3143-4b83-9da8-e39c8b9d0533", "sighting--aece1af6-bb64-4f8e-9c67-17bb0dfccd30", "sighting--dddafd51-469a-4db1-8ae1-9af1a5721ae3", "sighting--bf3b7b1f-8f43-4fbb-836e-36b7c45a2041", "sighting--6f76c9f2-0c48-49a3-bb32-93383ebf7867", "sighting--d59a2aba-9b20-4082-ab5f-b7daefc0c1a2", "sighting--6224d387-f8b3-4f1a-8197-5984bb93b15c", "sighting--26a902f5-3175-4bd8-8d95-4feb43dd979a", "sighting--c7cadf6d-0714-4b34-94b8-09b28fc4c8b6", "sighting--b0f8a290-2e62-41e6-9492-a1e89f646925", "sighting--d91c14ee-07c2-4676-9bcb-8c1b91e5e15f", "sighting--7677734a-6fd9-4e59-8353-d52ec7d9da7f", "sighting--0ba5db0c-4c46-41d3-a916-b16e3363e787", "sighting--f65697eb-6fa5-4306-912c-5b0ed6d6f333", "sighting--4acaede5-644f-4ac6-9595-4cee6a53133d", "sighting--5c89bcbe-6699-412f-8456-47b156327f2c", "sighting--ca018469-83d3-4bea-80b7-619fa7f74048", "sighting--fc4465d8-d0d0-4495-802c-e14e15923e34", "sighting--1608178f-b57f-4a67-994f-2ca54db48ce0", "sighting--8b819705-e612-4e8f-bf49-b80e93d66461", "sighting--20eeff71-87bc-4885-bd3b-620aef613ed0", "sighting--563dec11-8228-4bcc-b749-145edbcb227f", "sighting--8843a008-55e3-40ee-9c7b-a0290331ef60", "sighting--b0fc2539-8c04-4d30-95f9-e20557b32f47", "sighting--c41654ee-4f38-4588-ab93-ea2b31e37d57", "sighting--2bf80ddd-c1ba-485e-bef0-8686d769800f", "sighting--de0c8d6d-84f6-4563-bc20-63495679c50d", "sighting--fdf0854d-9457-464b-9c2c-e27162a4395c", "sighting--256b8603-beaf-4ac1-a2c3-c1e30db6192c", "sighting--f379a2d1-ffeb-49e8-8bf5-1894dd7bbaa4", "sighting--7c18d747-9034-41b0-8a7a-51f2e204c5ff", "sighting--4f66c9b2-60f0-40db-8aa1-78f7b13c9393", "sighting--7fafb76c-0aed-4088-97c4-7694939a74b7", "sighting--90328bbe-2e0d-41a0-b9fc-e5c9dd23b838", "sighting--cde53d71-cf8b-46a2-8257-aef1e3016b58", "sighting--95fb0df9-b82c-4f2e-be17-5cbb7e1e11f8", "sighting--175eedf8-58f3-4882-8502-47986872c2a0", "sighting--3e6d7c56-2dc8-414a-b19f-b609609b909d", "sighting--b7d25ae8-10a7-4f79-b9b2-1583a1a89be0", "sighting--1ad83740-eb7d-4355-a635-2a94b96f7ffa", "sighting--cfc4e245-3d9c-44b1-9c2a-86ddc3a6346a", "sighting--db12e0bc-1b58-4c83-a211-8585fa1aa363", "sighting--7f745073-e0b5-4f2b-bf91-e4ed988ddd9d", "sighting--49aaac9a-0baf-4841-bcaa-b1d511a888cc", "sighting--46784cf1-d9fe-46ac-bc87-db519f9b4748", "sighting--4f6b9c35-080c-469f-a7ab-b53dc6fad3c5", "sighting--a00ae8d4-3c38-479f-9d53-2ef530929b25", "sighting--a6cbb9b4-461e-4540-b55b-a5c3c738842f", "sighting--d9dbc681-c0d8-46ae-989a-05c72f0d24d5", "sighting--c65a25c8-8be2-492a-8718-4e5a31b50b74", "sighting--b576f2d3-7bb9-4aa8-8fbe-9716122925db", "sighting--b28d305f-ead3-4a19-b3b6-ccbe24c07e92", "sighting--5a91aeab-2b04-43d2-9291-339059a39021", "sighting--002052dd-7ad1-42e4-bc73-277b66d8e5e6", "sighting--10b17252-19e1-4c8a-9f78-796a4344f715", "sighting--e903af76-46e8-42fc-b933-ab63c388b207", "sighting--98701a3e-6237-47fd-abbf-9c71477c26b4", "sighting--5116bbac-d83a-48a1-8289-d8ef06df2df7", "sighting--a0415ff7-b170-48e3-864f-0fc727f4a539", "sighting--717ad6ec-e496-440d-9526-b99beae4858f", "sighting--ae7fce02-d442-4833-912d-d9fddf596eb4", "sighting--d389748f-f30a-46bd-9e1c-0a5bb594b06a", "sighting--43ed0335-fd96-45d6-a40c-7fa05a441dbe", "sighting--8be31dc2-2891-4af8-badc-839f7355c9ce", "sighting--1047a420-b4d1-4ea1-87f4-e8a57ce2c96f", "sighting--0a698b91-c289-44a1-a088-6a1e358a154d", "sighting--2b27e30b-d2f5-4c9f-a240-6e7bacbcccc8", "sighting--b9dca7c9-c741-4de9-8d00-0dd3a8db92ed", "sighting--2c20cdc7-8198-43b7-b386-89305f9da903", "sighting--16edbdf2-b9c4-429b-91c3-50b333a23a23", "sighting--ffd5da55-7032-4eee-aa92-92139f2b5f21", "sighting--0d04a92c-c1d9-4f0f-a878-3138872e4347", "sighting--fe910348-67cb-4a29-9569-01788bf67102", "sighting--828d56e3-7528-49ce-a166-e7647533f3d4", "sighting--6cea538f-34dc-46c3-add7-c1b32807ab2e", "sighting--1d2c1d28-2769-4377-bcb9-9e659ae76018", "sighting--b9a24d23-d23f-4401-8bb4-4c3fece01aa1", "sighting--1e1f7274-6ea8-4fe5-9b16-2e2d5452806f", "sighting--a1936005-7e9f-4772-820c-4c8d8031f339", "sighting--f7abd0d2-3bf1-4017-9dfa-e4a79d5528e1", "sighting--1a68c2d3-de53-40db-99b2-36d8b997cdeb", "sighting--0781161a-fd97-4ba5-bf1c-edce6f6694f7", "sighting--e5a948f8-aa2d-4df2-b39d-5896e818109d", "sighting--ffb65de7-15d5-4442-a39a-b2863fbef9fe", "sighting--2818550a-c250-45ad-ade4-448d8456506b", "sighting--a4cd0a93-591f-4006-9449-8cd49f96f0c7", "sighting--61b97537-84ad-4905-bc86-74b479e3da07", "sighting--3aa0be26-e2b4-4d74-b0c3-6d4e78801342", "sighting--e73f44bc-2123-4524-b4a5-bb6e39f9fc56", "sighting--5800ea32-c7f0-4d31-8555-822fc4f32916", "sighting--ac68e667-6b8f-4015-b68a-8ed067c1a7cf", "sighting--fd3ab0f0-a7b4-423a-a2c8-2fb56677b926", "sighting--22560882-e564-4b02-b4d2-86f73d0ac6df", "sighting--df132f17-e09c-4914-be26-ff49ec682b6e", "sighting--b7d701d0-e579-43d3-b84a-9bcaaca693f0", "sighting--36dc47d5-ce1d-4e89-876b-cef3fbaaab33", "sighting--ee6ee046-d428-49d4-b130-3e34cb27de38", "sighting--c64bdc8a-a324-40c9-b448-861919ead4f4", "sighting--6968ec82-4b8d-425d-aca6-3f868a0bc995", "sighting--de0df0b0-9f71-4e8a-b876-80eab6f623d7", "sighting--44c2e077-46ce-4b48-8fa7-218832fd042f", "sighting--2e4e74dc-d8f4-4995-a22c-5fb09e181bdc", "sighting--c7a039bb-102d-4d95-a1de-e0e5fa179a30", "sighting--91a47f52-6d88-467b-9846-a826040fff0b", "sighting--56ebd2fb-9fbf-40ad-99cb-b5e0ab979372", "sighting--111aaed2-9346-43ba-a3ff-cbdd2e2bebeb", "sighting--9b24b1d0-73f1-47d7-bddb-448423c9a5e1", "sighting--44b06b15-dae2-47c9-9f64-1d634b414c36", "sighting--79a81631-a7db-4362-890e-d3cb5e8a83ef", "sighting--7c2376e9-7fab-4a59-a367-302c10d6e715", "sighting--76da2cbe-8d12-4540-9786-dbc3cb2d2582", "sighting--277aaef9-0d99-4d1d-ab3e-6a1c4019b2ff", "sighting--d0cbf1ff-3a53-4809-83c4-3d13f03fe0a3", "sighting--f5b053df-ed80-4e96-a038-a80cdaf12ced", "sighting--55b02bbf-7b79-400f-987e-cc6a231394da", "sighting--adea8023-51a1-47fe-8efd-09627ae55880", "sighting--ee86b7dd-ccdf-405c-85fd-d121efa9afe2", "sighting--090fddb4-9899-4722-8344-e2620642492c", "sighting--54aa0956-bcfa-4577-bdde-fbb51d986c4b", "sighting--4117e27d-42ce-4c6d-98a5-8cd3894126a5", "sighting--ef2e1de4-a8c2-4be7-b3eb-2456bcdfd08a", "sighting--ad37b2fe-40aa-4f73-8ef7-c5e3ecbac664", "sighting--b18c16ce-7e9c-4eb9-903a-de04024cf221", "sighting--beb74328-d1d9-4785-bb3a-d81ea45b246c", "sighting--02bbc3f6-1f8c-46a3-9761-b988913c09c8", "sighting--76ec56f5-1983-4f82-aab1-9551d31d8e0d", "sighting--8d77a2a4-f1be-411a-b389-6f205b4d0a62", "sighting--7b9ecede-1483-42a0-ada5-cce0fb3d9cab", "sighting--4e0fcf0d-ff05-4fad-b6cc-0d4a7e6e0a52", "sighting--873d9267-2245-4864-86f9-e7897ff89db1", "sighting--090218e6-9040-4472-8d16-8707ebff31c4", "sighting--c2db50c5-87db-4385-90f9-7bacb8f2a27e", "sighting--e324a691-c708-4b9a-94ec-f91544a9812f", "sighting--e920b61c-5730-4883-b47f-8c5a537b332f", "sighting--1762941c-9b72-4b50-96b3-03f16e94055b", "sighting--726e3995-5681-43eb-a9ad-37e37192d0b0", "sighting--74f05852-0168-4a43-9bf4-d66f8e69efe8", "sighting--6f661254-b941-43c8-b1b0-9c13a6f2dfb2", "sighting--fbc6c229-1c09-4f9e-8436-785b5b129159", "sighting--8a068849-ecc5-4239-985e-845e65dc0148", "sighting--b6b38b45-ef59-40d4-9ff5-b939392a91a0", "sighting--20897e5e-c71a-4ed6-ab30-5056086a4000", "sighting--e4f81854-35c0-41e4-9a47-d1da4a2e3853", "sighting--8e613c2c-8310-4974-9831-fd3e2d495529", "sighting--493b0096-c610-49b6-805a-e937f771f410", "sighting--ae4db7a5-e3cf-432c-8300-da15e1b94731", "sighting--fd04b762-db6a-4493-aafb-3cc421a9666b", "sighting--8faa366e-56df-47d8-8a88-95d4e5b6b39a", "sighting--f5636877-2305-4298-8459-cd6d57134f7c", "sighting--6b6ee782-5902-4534-8221-26a4b5a81260", "sighting--1fd490c1-4511-4714-96bf-9b54e6bf6fb7", "sighting--922b6851-528d-4752-9dfe-6ed3bab5e053", "sighting--5c9f63b0-160e-44a4-ad5e-d4ad72420994", "sighting--9143caae-ec84-42af-9fc8-3535824582e7", "sighting--02933e7c-a79c-46b8-9f49-2878f74b5d1d", "sighting--9ab60b0d-c1d3-46b2-82e0-27e5f6252e6f", "sighting--989b4193-8299-4341-b811-e177b51e4579", "sighting--598ea0e1-eabe-4795-a8fa-d7aac0c850b0", "sighting--798e28fe-6fa2-4e43-8e19-64e4679183d5", "sighting--6845fca7-4d69-4ec4-8831-00ddb7ac313f", "sighting--074c4d06-e13f-4fd1-85ac-4c475f82d148", "sighting--f676238d-0883-42d9-bcf6-ede226b7dc35", "sighting--fefe0a87-e89a-4af4-bab6-b57e9d0e6ef8", "sighting--7fb8e77c-50c2-493f-940d-4af7026f80bc", "sighting--64cd7f9c-59d7-493f-a87b-f06a42503e0c", "sighting--f5e908ce-1d9e-4aa8-a59a-16b0d6bccb6e", "sighting--2e215fc1-b260-43d7-a7c6-a0895a8c7a64", "sighting--170ec61d-9d8e-49bd-8bdb-0c584b8c8a6f", "sighting--17b145ff-8aa8-444f-904b-0072e097914f", "sighting--efc0a2d3-e4cc-4998-82b9-f627c32faa8a", "sighting--c5395071-8d62-495e-9da6-1ca9c19ffb82", "sighting--cd01cc42-86ff-4afd-bfda-83b4ff9982a4", "sighting--157723ca-e52e-4155-9f62-7b8fc9efd2f4", "sighting--54e0d1a5-1f2c-4484-94c1-915dd772eaf4", "sighting--fd8aa9b8-77e8-40ff-9ab2-ac3bef7aeef2", "sighting--6ba41bc7-820f-46f0-9e5f-d893a38da0ba", "sighting--d45cb2ab-2cc7-481a-ab04-9a9302564904", "sighting--8713e6f7-6cd6-49b2-a352-60a8de0e7f5d", "sighting--97971e63-7149-4a88-9c48-3110a541cace", "sighting--31c1adbb-86a5-4a43-ba36-0bd9a3e82587", "sighting--4b712503-2d1f-4559-89ce-219c7a1a6dc8", "sighting--e5682735-5dec-4d5c-83b4-cc6066d37372", "sighting--0d89c93e-39d8-4b00-82d5-b35e72cc2dd0", "sighting--96967ff9-3028-4470-9a58-7e57d8c84fbd", "sighting--e2d6d627-f747-4764-a261-1d8a56b3bbdb", "sighting--0aaa6205-6d5f-4e28-a04c-8dc6d0f76584", "sighting--55dcb4ae-b7a9-43ba-bd8e-6b6243bf998b", "sighting--5a6ac08c-93e1-41e7-baf6-5a9db14337dc", "sighting--97a61111-0069-4b7f-a5f9-d7b0576f1c75", "sighting--8c8b51b5-db35-4959-a209-cea99cee7780", "sighting--9fc02125-27a4-43c2-9242-d450b549a632", "sighting--964ac4fb-fd34-43a9-99c9-b5863f97aa54", "sighting--f0fdd85a-b8b2-4aba-99cc-f099310b8b55", "sighting--c0e676c2-734a-4a26-a419-af15e35e555e", "sighting--b50f39b3-dc03-490b-b028-dda625e99f64", "sighting--fb776fcc-b1bf-4432-b41c-a7c8bd8cfe5e", "sighting--af6dc73d-134d-4818-ad94-23e668943dac", "sighting--00cf921c-cabd-43c5-9d86-e0a3359df484", "sighting--008874fd-7a0d-4460-9e8f-a0205a295df1", "sighting--c27e67cf-39a8-4f66-b152-2f9b8779d4ab", "sighting--02051ee2-b62d-4217-997c-44c2bab5d246", "sighting--e1327207-1b2e-4078-8c98-4ed90f726cff", "sighting--2e429a8c-7994-4d46-ad2f-595391b612d2", "sighting--bf18c5b1-5728-4e7b-809f-b0a930f841d5", "sighting--aa207cb3-dd38-4f91-8114-f8e8b9dd3db3", "sighting--6f01e3c0-1860-426d-8b36-1d9999c0b2a7", "sighting--0f061250-2551-4e7c-ab8d-81e78f3f6e09", "sighting--ed027d7c-b242-46e7-bf5b-0501c2f31038", "sighting--521f4dfb-3a53-41fb-a8cb-fa61d06a5e2a", "sighting--c6837915-082d-4800-984c-a52675357b2d", "sighting--2afe87ce-5525-40b6-bc5a-543270573af9", "sighting--be67b742-bddb-42f9-ae9c-69237288a48d", "sighting--e72fefe2-b466-45c7-996c-257bbcd7bc48", "sighting--4ee88bd1-bb7c-47b9-956e-d539ce58ace9", "sighting--3e73abfc-cd22-4b6d-96e3-48cc30d22928", "sighting--12f4e86a-a8b3-4d5e-ba2f-222d4bfe46a7", "sighting--d61c4f8f-b5a0-4e5e-be18-f779ef1b5d54", "sighting--06ff6229-bff3-4401-9a2a-119274fc1d02", "sighting--7b469b42-2f7a-4e5f-baa2-52361692483e", "sighting--eed3e4ba-2fdd-4319-9be2-0c74a000251b", "sighting--e665549b-99b6-42cb-86db-0a4a2e5c9816", "sighting--63646977-9cc7-4b97-9810-3f55f0b6f6f6", "sighting--af38fa82-ca89-4671-ad3d-c84e5e0d4faf", "sighting--d846465b-44f7-46d1-9568-0fe3e5826a11", "sighting--dcba2f32-618e-4deb-a868-1bfe4c94ad0e", "sighting--350a862e-687d-4ffb-80b2-b0673bf1b3c4", "sighting--b945a20a-052d-47b5-90f7-dae931ccd902", "sighting--3f31acac-84da-4313-91f2-8721d3854050", "sighting--6449e7ae-b82b-4228-a6cf-3e3695562075", "sighting--f5a53c25-8d08-422d-8664-006da537c6c5", "sighting--6c79d8a3-06f3-40d5-baa1-9909e939796f", "sighting--908dba86-9830-42da-bb53-1c835f241368", "sighting--7457035c-b053-46c2-8d95-165fb0fcbbdc", "sighting--a401a07e-07de-48bd-be67-9836a04353f1", "sighting--3d85a896-09b4-400f-96b3-5c0e38093809", "sighting--6b1912a7-bffb-4dcf-bd4e-1764e66f4f57", "sighting--43f97f07-ec7e-4b32-99b8-07f8dfb815df", "sighting--7b8b9985-83a4-475e-9a61-4c46ecc9c471", "sighting--a349e56d-913d-4103-acc6-b2af1810b815", "sighting--74a27d96-cdd0-4a22-9645-6fd75472570c", "sighting--26fe54ad-8209-4abb-928f-161f03ba6064", "sighting--7a392f5a-8299-47b8-a269-0dad8a40495c", "sighting--1e76806d-b5fe-412a-9bef-b77fced93c3f", "sighting--fcdcb42b-d3f4-4d6b-9a3a-675a983bb32c", "sighting--27d7d770-bdac-4322-a6d2-ffb547c144e4", "sighting--dcdcc6e6-31aa-4aa3-bb73-18fa89aee91b", "sighting--0878beae-7638-405f-878b-c7f9b1fdbf70", "sighting--e5dedf44-65a2-4cad-976f-9c99df451860", "sighting--1792dde3-c633-4a8e-9b50-2b1bb3d84e76", "sighting--ac1490ce-7813-4dc9-8a67-1718abffa43d", "sighting--19ada69f-5c4d-4271-bc28-8796d36ec28e", "sighting--090eb41c-d94c-43d9-b958-da504e004010", "sighting--5995f84d-e3c2-4344-9d24-646e10555156", "sighting--aa735ca9-fc9b-4c12-822b-e24258934474", "sighting--aa01e716-adda-4764-9558-3ed032fc0578", "sighting--ed7d462f-5fb2-4f1f-8ee5-393a82a76c9a", "sighting--875a7846-2248-4edf-a3bc-45ff60a11971", "sighting--b0b4a811-18f7-45dc-8f61-8d7ec21ed03f", "sighting--13d9041f-d81d-47c1-bffc-a4fd8a2f355e", "sighting--864e7405-48a4-4d5a-9c6f-fee7c0ffca7f", "sighting--f4c289dc-9329-4eb8-a876-cdcd9fbfb126", "sighting--484fdf1e-b175-4651-b87c-b76daf8237a8", "sighting--fa466bbd-1612-4eb4-ad7c-1702ee601c74", "sighting--28cbd166-0389-4afc-9fb1-188f4348fa09", "sighting--b0cfbecc-e40d-4cbd-b6da-e0dd767a598a", "sighting--310f160b-29b0-444e-9bf5-64b0868a9101", "sighting--ff0b58b3-e9b2-40ab-86c1-9aa643f10e1b", "sighting--c4163ea9-cedb-486b-95e2-e98c61876c90", "sighting--f0ec51be-1b47-4b05-bb2f-ce02ca7cc566", "sighting--bda59128-32fc-4972-a7a9-06d64cca321a", "sighting--11dd6be1-1244-42ca-af09-6312852bf65e", "sighting--4d624df3-fad3-4377-a4cb-12b16f8de6c9", "sighting--9eb6a949-9feb-4511-bece-07b74cbbf468", "sighting--6a545df5-c314-4332-a05c-cb3036e438cd", "sighting--b56f49b2-5932-4b1d-a3d8-00bf65e81701", "sighting--a7908b00-d6ef-4a48-bf34-2e13bedbf448", "sighting--373ede3f-6f0c-4ca8-b0aa-e6767de122fd", "sighting--52042162-fffb-4da2-aad4-4d37360c61e0", "sighting--cbc176c8-dc0a-4a18-9a00-ede2c7a54b06", "sighting--f2a1f577-a484-4716-b072-9a2863390877", "sighting--6648afb4-c117-4b6f-9a27-39c821901f89", "sighting--cdcfef18-a9ad-4353-93ad-e1e66a5cd2f3", "sighting--71e39220-a4cf-4d41-bbc1-e5922191c320", "sighting--48745d03-46c9-4df8-8507-766cb0c17d90", "sighting--1d595722-c8b4-4c21-8e30-4cbf81ac138e", "sighting--ce9c6024-a16d-4a75-ac72-a527369cd166", "sighting--77676163-6ef4-4edd-85bc-bb0d4dfa0544", "sighting--7c5c06a7-83b2-478e-9fb4-41d8fc8c77fb", "sighting--79089614-05b8-4100-ba3f-02d75a086cf4", "sighting--732286d7-3e11-447b-a2ad-13cc1e5d209a", "sighting--489e1c9f-41e6-454a-bbb6-3cb45dd49d86", "sighting--53cd6b45-fc48-48e7-bd3a-b9751e4787dd", "sighting--038ea368-0b2c-4f98-acb8-b7939cc30000", "sighting--5a9febaa-62b9-45d6-bb3a-3ae0a0579d5b", "sighting--6510f342-d259-4090-8a4f-d4ea56766be7", "sighting--b75d4290-0181-4cd0-903d-d5d0163f921f", "sighting--b53806b4-d4dc-422c-b848-5aca4af87f64", "sighting--fc554e0f-b3e6-4aae-9658-f0e27240f5ed", "sighting--715da18a-1ae1-4019-afcf-1c37b0eccb5a", "sighting--8bb1d590-1926-4533-9f71-0d97fc6af6db", "sighting--62d36bdb-526c-43fb-9b8c-5ba18e81e343", "sighting--43c818f6-8212-4ca0-bd97-f6dd657698c7", "sighting--e7e9e980-9571-4aa1-af65-9c831d586183", "sighting--1ccdc11a-e509-476b-98ff-c1a128c8c77f", "sighting--73060c4b-e4d0-4b7b-932b-498cc0eb3768", "sighting--fb71fcf2-edd6-4dc3-b0a5-bb9719066a24", "sighting--835e87b6-471a-4c4b-ac52-68fdaf55d13f", "sighting--4f707ee0-bdde-481b-98fe-38f39a4a1839", "sighting--099606c1-b9be-42c7-a8ac-b2c84e9b05e5", "sighting--547969b6-8beb-4c03-8487-0b5017cc5d57", "sighting--cce92f3d-e7ff-4aa3-97ea-08684c2bafbc", "sighting--7f80d218-389a-47ec-8ae7-982e0b4938ab", "sighting--5577871e-c9a5-4412-8e0d-a1de57f988ca", "sighting--d6db8651-1c46-4f1a-a2f1-baab6c42c0e8", "sighting--4335f457-3427-4827-a326-7ebc10886643", "sighting--45a87fd4-4a8e-4733-b47b-36f018bd378b", "sighting--ca96ce92-44ee-4f6d-96ae-edec5bf92dda", "sighting--a1cd49d8-6647-4f6b-a811-a8bc856e9699", "sighting--d9940dd1-d2e1-4944-b5de-1d91e362291a", "sighting--c81da9f3-f5a6-4b15-8ad5-e332b4b7539a", "sighting--0762f1eb-9fed-4f1d-8f12-e9123142dd11", "sighting--19244930-ee91-4d1d-be65-194b32f97168", "sighting--fa012ee4-c8af-45fc-a2db-b1921889bb62", "sighting--4faa9ca4-fc87-46ee-976a-7c10c1692fe3", "sighting--bfd77d72-bd37-44a4-99c3-bcf71365f519", "sighting--ecf353d8-81fa-4860-ae82-d891f4289d50", "sighting--4c08bbb4-8b71-4ed8-b2ec-aaea1328187e", "sighting--7eba50ca-5873-42e4-b765-91504d46c222", "sighting--d0d01847-0c1c-4dac-8594-c2bb94620b73", "sighting--77de7351-b016-4e87-ac79-85d863488efd", "sighting--6474a12a-bbb8-4007-9a4d-2db02d4a04d2", "sighting--11355b0e-22b0-418c-afac-328ccc31543d", "sighting--b68558b5-b243-46d0-8aba-54e30cb09b63", "sighting--5388383e-a994-4e02-9111-3fa3677d3ccf", "sighting--7235e791-3e87-4608-b33b-2d79bc98c18f", "sighting--96a06e1e-3369-4715-8032-ce7a2b8793ea", "sighting--8e92b90a-4e88-4a69-ad57-6f5b6e4c2623", "sighting--739711c5-3934-4fde-9ca4-51f0f3f963bd", "sighting--7f1e3554-6aa8-40ef-86b7-86fdf510bdf5", "sighting--8f9bb871-d79d-42f2-8e9e-7ccadd195d22", "sighting--b9c8d213-152a-4b3b-b501-a3b8c14a81fe", "sighting--a367e105-5ee6-4a15-bf02-6cc924976f1a", "sighting--efda8904-398a-465d-b208-d04f9050d81e", "sighting--6c9070e4-fb0c-4627-9ce8-21f8aa21caf9", "sighting--5b6687a6-377e-4942-b3d1-5d30744c52ba", "sighting--15507ab5-3a3e-4077-82fa-e1c566cbc617", "sighting--61ab9dd4-f47a-421a-8472-1563f6a53808", "sighting--77943711-9784-4121-a7d0-df8cc0602e9a", "sighting--2cc73269-f0f3-4347-b06c-a6becfccde4f", "sighting--826b57ca-d27b-4fbf-8824-f01e976b724d", "sighting--5d225c1c-ae99-41af-8b2d-be3e4e492950", "sighting--6082175b-f59e-46be-9171-d6221d84f2c1", "sighting--c22c921f-1ec4-4c40-bece-e782147764ee", "sighting--4d924ff6-830c-4af4-a921-d99fa22ffa88", "sighting--d3c93710-4bf7-4d14-9a10-dda2ea4fca58", "sighting--f39e4d2c-3b56-4121-9e99-08b4cedcaac6", "sighting--93080fd7-1814-494b-a0fd-56d41de20f06", "sighting--1f2200c8-1676-469c-9592-dd2188f2ac2e", "sighting--0802a47b-6cb4-4ee0-840c-3be0ac937317", "sighting--a596c2fe-4b04-4401-b3d8-924edd9626c9", "sighting--8849d084-7ddc-4793-8103-135ee28aa6ae", "sighting--61dd9f7c-ff72-42aa-8634-cd13e69b6b53", "sighting--81bd32c5-6f0c-4d11-b90f-f83b9939b7b3", "sighting--6fe32308-3817-4829-97dd-bd90ccd19bbe", "sighting--50f5c806-39dd-4038-a39b-40a2b43e2a1c", "sighting--a4edf47b-e7b8-4ebf-a5e4-22c2c634f50a", "sighting--1446060a-ae60-4f6b-bc38-06c28c4e3fdb", "sighting--3a2ec7d5-0ee8-496b-b4ef-1aec939914fc", "sighting--6e0b8800-3211-44d9-8ac7-995359f9acc5", "sighting--d14a4c2a-8fab-4803-b7f4-df2660f8c426", "sighting--aac9b5a5-f0c0-4d7a-97ae-b9f16f9e553f", "sighting--993fee0b-cdb8-46ee-af7d-f97080046602", "sighting--564dd1ac-9d10-4c52-8188-d2d06abc6061", "sighting--40ee6b87-1272-4559-82fa-dff5cb8562e3", "sighting--bdf2d8d1-361c-40c9-8de3-50b86e8878f1", "sighting--f0a8ab2b-4753-4b2e-ae71-7580a6854b02", "sighting--e3a6c930-f05e-4f23-934b-4ec7b264f5da", "sighting--0c4726df-020a-41f6-9336-02520ea8372f", "sighting--ef74c117-5ed3-4c02-920c-e65a53c17d7b", "sighting--97f6b1d6-8ab5-4b54-950a-ac0540dc1195", "sighting--90e08da1-7df5-4381-ab70-57d421b889e0", "sighting--c5f0f2c5-2935-4025-9be6-acdb6803036e", "sighting--29400de2-4a79-4e75-b48a-9950d9fe0269", "sighting--f4682211-4f9c-4efe-b17e-9a21ff1e81ce", "sighting--820944d4-6392-47bb-bcf3-a33d5e5f1ae6", "sighting--a18ba986-1569-4a0d-904c-de6897211827", "sighting--6168b636-5e0d-457d-a4fa-d412b04796d8", "sighting--2b9f4803-f619-485b-b44b-120e15839965", "sighting--1d4e4caf-1c7d-4b79-b0e0-78e2a4cf839f", "sighting--4f2e52e7-4b07-4c66-9677-7d8f1b6c29cf", "sighting--e80e206d-fb83-4785-843f-5b8d5d0fc093", "sighting--ba508250-bd65-442a-be99-d52a9b09978c", "sighting--18c6cd26-0144-4837-8698-5d7099b1da5b", "sighting--f9e731d4-777c-4bb4-b06c-44d589a9743d", "sighting--bec25509-6ceb-4189-a33f-2478558d5634", "sighting--882e3706-0964-45b0-a294-da27d4be3b6d", "sighting--19a6df87-c5f0-488e-ab03-d901979c113d", "sighting--30706934-0b5a-4953-8d0f-7f095f6900f4", "sighting--649a78f6-76a7-44cb-b474-b0700cffeac3", "sighting--1d9ff253-4464-432a-8432-0c7ef8a646e4", "sighting--a3f6fb13-29a3-4f08-a85f-c8d4cb663160", "sighting--8a7e947d-9d71-4c45-b672-0f2a69ea3bd7", "sighting--f82723b1-be41-41a9-9acd-50f5412d4cff", "sighting--0b84d7f3-6719-4754-9aca-a91b3e3ee1fa", "sighting--d438f4f8-56d8-4094-9f39-f92a4efb9d6c", "sighting--f9e4c4b6-1b75-46df-b79b-01f2f8c366ee", "sighting--13854a10-17a7-4fd7-b736-e62be5eab722", "sighting--6c439778-87a1-4155-9dcd-4524bc88fdd2", "sighting--f1a000a5-dfec-4ee6-baf3-db87fafa554a", "sighting--f2df307a-094c-404b-9462-ef2c199e528e", "sighting--121e7e80-50ec-463a-b319-bdaa13c032d8", "sighting--73e7576d-1e9d-438c-b9b6-0be4df708693", "sighting--d641ced6-5880-40fe-be70-c0d1aab97083", "sighting--145046e2-5d45-4c6b-a573-aacbffa2aa31", "sighting--db6520f9-fbdb-4a36-90cc-dd4c1527f800", "sighting--1a9de17d-f43e-483f-b4fc-865c2d3605a0", "sighting--dd1b9fa8-f608-4a81-b7a9-2166b7388394", "sighting--fe3b67f8-897a-49f6-a0aa-e07cce22cd75", "sighting--c861b8a1-21a4-4062-a3c4-b5c2fc25609b", "sighting--c6235513-3b4e-4203-9fea-bc234a455c79", "sighting--5f13ae56-4b39-4588-bb5d-500bb49892c6", "sighting--d98c4807-d433-465e-8e48-8881544dddad", "sighting--efbd3886-edd2-48ce-ace0-c50c22068126", "sighting--1042eeab-889b-40aa-b60f-cdf0b54755cd", "sighting--e630d6ce-11d7-4ddb-894a-936b4acf8723", "sighting--1746d404-749b-4521-9113-f0e358e8a69f", "sighting--ac8cafd2-247b-432c-b084-17b307894ef4", "sighting--327a99eb-ddd8-43b2-ae20-f9ea1748a8b5", "sighting--94ba80e9-d86a-492c-be52-48d864baf970", "sighting--77d2fde4-26c9-498b-8ecb-d93372caaf94", "sighting--d6d6071e-0b37-45a8-be02-b4666aba5f75", "sighting--08056977-4e31-4d41-b5bb-e257d1be4f32", "sighting--acd151cd-c512-4386-99ab-04bf1aa952b5", "sighting--6fccf9bc-eb99-4a53-a23f-13eca88371af", "sighting--612bda48-63a0-4d3b-8832-620200dbea55", "sighting--c89231f1-d77f-4c47-96ee-aca88dbb16ae", "sighting--aca1c748-f0ce-4549-9736-92ad155a6ec2", "sighting--1bf337ef-5f68-4ddc-945e-0ccb619bd8f4", "sighting--7bc383df-d5fa-4e34-8238-3685ee443e11", "sighting--ca812f2c-2edc-41dd-82eb-fc74ddce9199", "sighting--61da45d1-4874-4d16-aea6-df1506cec293", "sighting--c1285f4e-4828-4d39-b54c-7a40b40fbfcf", "sighting--94aa6db0-6464-4c08-96f6-4f9439f80abd", "sighting--f912efa5-89d2-4c85-9c3c-3f43e53c7544", "sighting--808accf1-a3fc-4a09-aeff-e92abc66cbe6", "sighting--600e3137-d791-4d70-90f7-e270c655401f", "sighting--0e38cdf3-998d-4b55-a887-a19710665d01", "sighting--4c09b430-7ab7-49ae-a8ae-e1e7a4f4c0e8", "sighting--1b28d35c-85a8-4580-bd11-f33c4046ed2b", "sighting--b60ceb5b-3624-4fec-8d8b-01341d99b0d3", "sighting--25ea38b8-0de0-4ffa-94fe-0199d919b2e4", "sighting--b1077ad8-14b3-4fd3-aa42-99930082511f", "sighting--306a8e99-3a61-4233-a4ea-4bb0e4359d7e", "sighting--a798da8e-760c-43b7-b142-dff8873caf74", "sighting--4f6c5ec3-dea9-412d-af16-de879fef0366", "sighting--b303a5a5-0f60-4dd7-a34c-5d4f1cad1514", "sighting--4b1fb45e-3672-4027-ab1c-509ff9d00c36", "sighting--eefef130-fa7e-4ce9-a070-4b1e8bbb34d1", "sighting--12ff59bc-d5c6-4d88-b4b7-5e982be17fb1", "sighting--74a96b94-ef18-438e-910b-3e4178e14bbf", "sighting--e48e5469-e432-4168-b3bf-b9928ab0a417", "sighting--a729b127-c2bc-46e2-9f1b-93936fd840fa", "sighting--ae421091-ac80-48e5-9342-8563f99eb93c", "sighting--84dd63f3-100d-482d-883d-671d0eee4081", "sighting--aa5dd107-dd21-40f9-a3f7-bbbad95893b3", "sighting--29f2208b-5c57-4f9e-8f6e-9e7f0d7b13c2", "sighting--27cea844-47c9-4795-9627-d31697ea5699", "sighting--726e2cbe-ccca-4f85-a6c3-6b93755ac659", "sighting--fd26d604-5561-4748-a69a-91069a59a0cd", "sighting--9a3cb8bb-c021-457a-8ecc-0a767a7a570f", "sighting--11865c42-1e61-4901-b172-5dd72d341358", "sighting--3aed1071-e301-4b01-a28c-c730bf676656", "sighting--185b3f75-c39c-4562-b910-ab2896f2e2d4", "sighting--6f402bdf-fe0f-4c57-b154-b9aa7f546a1c", "sighting--e875540e-ab4f-41e7-884e-61aa570c3b93", "sighting--5979d784-ec26-4700-ba7c-c885295f0ca5", "sighting--9f163243-8bcc-438e-8d1f-7c74dbf336d1", "sighting--3a7ee984-ecba-4017-9775-472a99212e0b", "sighting--44453ffa-7014-46dd-9693-6f54b6e4de42", "sighting--5f4d16f0-ddb6-4437-9625-bfcff3d37154", "sighting--88af44ca-0ac8-46a3-aa5b-5eb768732d1b", "sighting--943559bc-2099-4bc6-a9a8-1683370944c4", "sighting--d819954b-9d20-4c3d-9dc4-311698bfa700", "sighting--7d63b1c9-daac-4f51-b9b6-d682cfdc4580", "sighting--ff7205b8-110a-4f47-a48f-e66d54164ac6", "sighting--32a6a868-b184-467f-86a8-e20749cc974e", "sighting--3407e960-12f7-4333-aae4-3e0a58f97e3a", "sighting--9c906ad9-ac68-4ece-996c-8ced1a14a1fd", "sighting--3203d50c-089c-4fbe-b930-6c61fdda6619", "sighting--2e9abb2a-ead2-474f-8ae2-f2d68b12dcee", "sighting--7f0f47d3-df34-4dd4-9c82-91c397dee85e", "sighting--9a4185d7-6312-4950-9fe0-8164ca600eb2", "sighting--eb99bf9d-5245-447a-b37d-7cc038dd8731", "sighting--27a11c6f-ab78-4823-8cba-9bf849007d6e", "sighting--482268e8-a68c-4dd1-9813-108c0b115c94", "sighting--6d9f8d6b-7b7a-427d-b46a-701cf05d95d2", "sighting--92aa9ef0-b51c-4737-a00d-5915287b0bea", "sighting--99043863-8996-4d24-8724-2c71b6648071", "sighting--548b1594-e9d1-4cb9-a020-c725e25f4f70", "sighting--c0630158-cb33-4196-a43e-2a865eef849e", "sighting--83e66c29-a4e7-401a-a0da-345b9f341a7e", "sighting--3f739fd8-c944-4e40-a644-e619512535bf", "sighting--5ffca1fa-1f95-40b9-ab13-f4a62a8b41ba", "sighting--79d6a978-d9ce-4e8b-8f27-c39c93a51716", "sighting--ebf54722-3bd2-461e-a361-a53ae91bed6e", "sighting--72a66564-784a-46aa-8517-07b23c9700e3", "sighting--fe2579e9-6115-42e0-bcad-68ebb98a0956", "sighting--19af1821-a851-4bd0-82c9-78f182709762", "sighting--8f9bab29-3760-44c4-aa59-294078d36c7c", "sighting--c2bf7fbb-ace3-47ca-a5f6-47fdd4472ebf", "sighting--3bd78d82-9d06-4802-814c-cec042f3af23", "sighting--9f24e031-d2bf-46ab-8a6b-afc9c4e69e5e", "sighting--6cf229f4-9ada-4211-9454-1c9a5b0f1952", "sighting--26dc998e-0421-4e0b-9ebb-a9c44e2860dc", "sighting--f08a99b2-323d-4752-80ac-7b1f00e1c42f", "sighting--7dadbbc1-08e8-4814-8911-f5c43ae880e2", "sighting--431b6855-cf01-4846-bcdf-8b5259468a53", "sighting--272e4e7c-94ea-4d52-bae8-07f15da22967", "sighting--3aafbec3-cd0f-4b88-93d1-f0c7a1c23bb0", "sighting--77089f17-e288-4651-9eaa-140646f5653d", "sighting--0cd18a31-6e63-4f52-b4ef-c395bcb9cb11", "sighting--045635f6-c180-42cc-9060-968af89fedf8", "sighting--40c439eb-ac49-475e-8e85-d5794934be4e", "sighting--1e599a76-b727-4535-8bbb-f8b831fc9f4a", "sighting--b95bd4b4-c458-4b83-8053-11046b9b1dbb", "sighting--ca7a5236-7df6-4c9a-afe5-aa3c5a6084d1", "sighting--4b6662c3-75ad-419e-b774-9c72c471bac8", "sighting--3a96136a-6908-422d-a508-7d3965b464a0", "sighting--734696bb-ed11-4ee3-bac3-8b33610084cd", "sighting--42ddbd3d-7a54-4e66-94bc-f9c9a2bbe29e", "sighting--58c3f561-245d-4353-88ef-b02535dabca2", "sighting--c3a7a944-2e5d-448a-b5b8-e0c5db64c408", "sighting--42190959-ac57-4852-bf56-8655adbeea81", "sighting--413785fd-f3ae-4014-9dde-4048a17534fd", "sighting--f5e5e7a0-db5a-4750-813b-5d44aa79fac6", "sighting--a38d19ee-aa72-4963-b265-a6eea07737cd", "sighting--6342dde2-015e-40f1-a47b-ed4cfdf7c518", "sighting--9e095250-ad38-48ba-b0d5-b4216d5da1a4", "sighting--f2765103-f2f3-4b14-bb1e-1b120d6339a8", "sighting--94b42fee-1540-4bd6-b375-7c2de2d98263", "sighting--e868c8f4-9cdd-4435-b7b2-e088e48f41f2", "sighting--0b23a06c-38e1-4904-b729-e83f7c1e5be6", "sighting--7c887893-a9ef-40c2-8b45-6eb203b3f231", "sighting--eca7f657-ce0c-4058-81cb-6cbce3c2f218", "sighting--7cb26dbb-e6a8-4fbb-b5a8-48cf03d25ac1", "sighting--476eca02-22d7-4dab-bd2f-08cf85b84c42", "sighting--cbd086d3-e0f5-461b-8360-29fa997acfa6", "sighting--0531ce58-e442-436f-9607-59f570ec22bf", "sighting--241ac21d-7eb8-40d8-a3f9-23f5ce561164", "sighting--12e0cbe7-2826-44b7-833e-611e5027b4a9", "sighting--73526a2d-548d-41a2-a7fb-880971d6e917", "sighting--a8813359-dc7d-483e-a768-4b4b55786ae8", "sighting--60e198a9-9714-47cc-a0a7-a2362b209b9b", "sighting--6b9d9e88-224a-460a-b60c-1f02c72687f7", "sighting--32cbf86b-109a-4ac0-b7b5-3d5a5df7bd59", "sighting--69c247fa-5b45-46db-acc0-a55cde045971", "sighting--8d5cbd34-6193-4a9d-b0ab-035a4e754feb", "sighting--bf030f89-001f-4046-9863-3682834b70f0", "sighting--4fde7138-9fad-4185-922a-5d7c7df58e72", "sighting--bf53fe41-35ba-4548-a79f-c356dcf20055", "sighting--8268d536-f351-49d4-af83-d111bc81b921", "sighting--e249724e-d21e-4bb2-984f-9f7ccfe9d076", "sighting--60106e3c-cd50-4232-ae7a-73645ea4a0ae", "sighting--035511cc-35c9-4362-a9e9-b9c49529df3a", "sighting--e82091f5-e66c-4e86-af0c-67f71ad824a1", "sighting--7082d29a-7726-48f4-abd6-a3e7cfe602e0", "sighting--71614a23-80fc-47d3-a421-fe03e69b4e2b", "sighting--82c5ce96-8920-48a8-b50e-cf71cbfb21cc", "sighting--0d8ea2ed-9285-4436-9098-2d43ec6c30fa", "sighting--8394fdfc-44a6-4b6b-bb21-b5f0141d442f", "sighting--8eb78ba0-f45c-49c4-8818-0822de4e09f7", "sighting--87c3e834-7d1a-4056-a22a-379e22374e87", "sighting--7cb4558c-4440-4ecf-bd9e-b4400674bddd", "sighting--cd5557cf-2cf1-488f-bb41-6ed1d76b065c", "sighting--241322b4-c87d-44b5-ac93-5e7629cdb56a", "sighting--f082efb9-c080-4825-b049-9b06fb1cda9a", "sighting--0ceab99e-821f-4916-888c-45ba31c968f9", "sighting--0e688e8f-ca39-4f76-9930-5adb5ac8ac7b", "sighting--f84df57f-9004-4c94-b569-2ad2cad17af3", "sighting--52dee07e-ef90-4ba0-9300-f5c3c68bcd7a", "sighting--9cf38bf3-a0d5-4aad-90ef-ef1b566cd68b", "sighting--d05ce81a-06a7-47d2-a9aa-7352dedd3236", "sighting--72ad6915-83bb-484a-bafb-434ac21032bf", "sighting--c710ed99-3ab2-4635-9613-a629a73f002c", "sighting--56398549-40a2-49d6-943a-1326a40cfeeb", "sighting--8e5f9af4-d252-4114-b7b4-b4db8eb157ef", "sighting--c8f5c186-4c5b-46e1-a6ff-128c113d245f", "sighting--aca23811-b64b-464b-8b4b-86b292c87f01", "sighting--d1b16efb-78a9-48df-a7fd-fbcad9bfdf3b", "sighting--6d13d5c7-fa9e-4b53-9efe-92d89541f5ad", "sighting--e738484d-1a79-40c3-abff-14ee086f9d77", "sighting--d0488a6b-2cdf-40c1-bb71-de1c8f311161", "sighting--ba1b9ce7-ae90-454d-8d2a-b5a539f7e56b", "sighting--07bd2136-6db2-4868-87e9-77a3595cf9d4", "sighting--c97bb18c-05d7-4f1b-97ac-7752c177e056", "sighting--d3fa8d96-94fd-4be6-a10c-af0ae51c38cf", "sighting--882e69ad-2788-430a-b090-7b1cff9a6787", "sighting--9cf36750-c006-47d6-979a-41aa60b0ad4d", "sighting--6ec0dc8f-e5ae-4d7e-bd63-6a5b1b2760b7", "sighting--4f4f1721-327b-4d16-81b7-d164b100d8c3", "sighting--254a8ce4-2074-4432-aaea-c00a104767f8", "sighting--1c929423-24a5-4228-a061-13928a05f604", "sighting--072564aa-040f-4b74-9fcb-ffdae34f6e2e", "sighting--dc74a7fb-d568-4c67-a354-bb5cc6da0a84", "sighting--76db18d4-7d0a-4177-bbdb-9597b50bd5c1", "sighting--b50b0de0-aa5d-4081-85bf-841ed53b2275", "sighting--e954e945-4fb2-45e3-b77d-75d1ca69eb47", "sighting--765fecb3-eaf1-47c7-9254-6eb45d54083b", "sighting--91082f3f-8bcc-42a0-91af-4358e6528ced", "sighting--39213f06-2c41-4f1a-b203-2fd2c0333999", "sighting--76451f8d-2a97-41a9-a298-4a1d616104cb", "sighting--52e22ede-7485-442a-8486-98f475a26625", "sighting--4a16e26b-e213-4a22-aa5d-496220dd3028", "sighting--70ba545f-3bc3-404f-a59c-7f4cb997eda2", "sighting--21bc643d-07a5-4341-869c-4ab915405849", "sighting--3232cebb-3422-4238-9ac8-fc3d3162ab01", "sighting--ff9f281b-fbc6-4020-bbf1-5539301cc8fe", "sighting--55e77cad-24f6-454c-a1b4-e8f00e9259d6", "sighting--c06609b9-982d-4f65-a150-e0e13840bb1f", "sighting--0d52f9d6-5b3c-496c-8945-d45169334e1e", "sighting--b7762092-4e31-49b7-af46-3f4f6e60e1fd", "sighting--58a9cfaa-40e1-42eb-a3ac-41f45978b335", "sighting--dd86870a-6ba5-483a-abc3-398a45398950", "sighting--d0c7fc14-0887-486d-a0c5-9ecfb0399fc2", "sighting--b645f7b5-b463-4615-9aa7-16ab67479617", "sighting--8618a4f2-846b-4abb-bf1a-c85fb61c3d64", "sighting--ba329edb-597b-45f2-8fe2-aeab0480a070", "sighting--735042dd-3d40-4ede-a321-ea3c2bbd1c9f", "sighting--dc9e608b-87e1-40c0-b08d-cdb2b2780b28", "sighting--fddc991e-60b8-4de4-8e65-65e347165ec9", "sighting--6c8622de-4f7f-40ec-bde3-57d58a18e518", "sighting--520f0eb0-46e4-4bd6-b7e0-c38562728dbb", "sighting--a1a1e469-8ca4-4a56-a1ef-69a5dee2cd65", "sighting--0045c230-ee1f-4b96-ac15-726931a23aaf", "sighting--ddb3ee40-36d6-4f46-ae7c-7ce1a510c99f", "sighting--ac39070c-c3c9-460a-8b76-1b84aea9b373", "sighting--a25119e5-5aa2-493a-94ae-ca540c0f1ac0", "sighting--d34676e1-c746-4aea-af53-ab095bb9c102", "sighting--57fb6afb-252b-49c5-8fb6-c8b1c7c1092f", "sighting--89b8e7ca-2f6d-4ffd-9a8e-34178b199d82", "sighting--3691459d-8545-4b5e-a3a0-a8a74645da10", "sighting--c1f476fe-9ee9-4173-bdfc-ea21bdef27a6", "sighting--e52fc51e-9764-4ba6-b5f9-56d307824d1e", "sighting--5f1149aa-af4c-4ca9-a55f-035161f8ba89", "sighting--e66267fc-cc48-4a83-b83b-7c82a055f90d", "sighting--83d6a70e-5045-499d-afae-65ded03de289", "sighting--c9736025-8f79-4a58-9a4e-07d63f8b8509", "sighting--397d7eb5-d6f6-4aff-9a3a-43ca13ed7def", "sighting--1ae26ece-5393-4115-a7bd-7a7cc979e002", "sighting--59cb7b21-a15f-4170-839c-c3c8282d146f", "sighting--a528abcb-d01e-41af-bbbf-3b9033830465", "sighting--f48d822b-2c9b-4fcd-8201-987c3e5d7ad2", "sighting--c82653dc-1dd2-4122-8bd9-b8167a3e4a19", "sighting--1527e9a8-7864-44b4-a9d2-881d1b401caa", "sighting--1af266b9-14c2-44b3-93ba-a7420725868d", "sighting--aeb8416b-fe92-44f2-899f-76d9501e9139", "sighting--22db489b-694d-404c-ab3a-5b4717a67c58", "sighting--1bd79935-fcc1-4710-929f-d31c0884a4b8", "sighting--53c9a957-3b24-4a52-9b64-5f95e0dfc90d", "sighting--8b9c2b43-ec4b-42fd-8d61-1f77010b0b7e", "sighting--c69cf035-41a6-491b-84a3-96bc9a746905", "sighting--7f7dc8c7-e007-4c47-92ce-8dae99274217", "sighting--0a134cfb-6732-4399-98dc-842ee2990ca3", "sighting--1aab2305-d16d-45c6-900e-d60b71497297", "sighting--a57f74b8-e375-4063-8260-ac3915c26220", "sighting--bddfce90-8717-40d5-8398-35fe4bbdd54e", "sighting--83e56183-f092-4bf2-8e4b-35911f5db1d7", "sighting--932539a3-cae1-4c2d-a11c-c7d7d251c643", "sighting--c29714d4-abf3-42fb-88e5-567d7b3ace24", "sighting--e886b585-e7c9-46f4-8424-ac4bb31ea052", "sighting--788dc966-c028-4623-a442-7cc266dbd1b5", "sighting--19d3d378-1293-4046-83cf-5757af45527a", "sighting--942a7700-444e-4df9-9c64-46866feb39c4", "sighting--09de8732-48e9-44d1-8f0b-6f49830c2878", "sighting--71e07ee6-6940-4305-9956-c99f5234211f", "sighting--c7514890-ba8e-4ac0-bcfb-a46e3befda8e", "sighting--228c9b5e-6817-4721-aaee-4035b4c61314", "sighting--beb96e4b-f81c-435e-a81d-ad47d1dc4981", "sighting--065f4b15-7b3d-4541-bf57-7fd86fe214d6", "sighting--ae818984-bbdd-48eb-97bb-e898ed0d6d1e", "sighting--e708f255-0ef2-4253-a5d1-8de9f14bc4a9", "sighting--f64b424a-af70-45b1-8af2-94980aa14c6c", "sighting--474efd1a-3ed7-4eb3-ab78-64b23f4582a8", "sighting--6311d966-19e1-450b-92a6-0387966b0ddb", "sighting--25d27071-ac19-4a87-8f0c-dcb13fb115f6", "sighting--4b335096-13aa-4447-9087-ae0f4fc38e06", "sighting--215dd947-91b5-4959-83bc-e1e65376c815", "sighting--e6a30a7d-a206-46af-a4bc-446f9b723a10", "sighting--8b9aad57-8e4a-4e67-8652-d38ac6c99eaa", "sighting--0dde192e-ec56-4c5b-8fc0-e010ebeca9b0", "sighting--21e2facb-b072-41cc-86c8-3b3d45577328", "sighting--a34b92bc-c4a3-43ab-9338-d53c67a35a35", "sighting--c9f5f6b8-5395-4acc-8709-f428570c233e", "sighting--c11c0b07-0748-4815-a598-8e6a7b2cafd4", "sighting--23a08b01-72e6-4b14-bf55-371cee331eac", "sighting--b74ad138-40b0-4611-bbda-2b2ea572c560", "sighting--7251a091-3dfa-4463-bf21-6773d665fabf", "sighting--61fdd362-379a-4ac9-8c3a-b78f22201d1e", "sighting--dfac4b53-a95a-4732-a860-3d5d3b200905", "sighting--a92402c2-7ea5-42ec-bfdd-10a6f0730ba3", "sighting--ada4c174-12ef-4238-a9b0-bdb22f255596", "sighting--94b5b815-a170-441b-a933-6b1963fcdd39", "sighting--1b81fe54-6a8e-42ce-86a8-b5f61fb8e8dc", "sighting--26002628-1fbd-451b-b815-6e764ccc5180", "sighting--563e9506-c895-4087-a101-cc89fef16117", "sighting--3b02ae61-93df-44da-acf1-a2763bf95aef", "sighting--57cf8b88-ab8f-4cde-804f-3c64a417bde0", "sighting--aee947bc-9e85-420e-b55a-bff8f92668a2", "sighting--cdb30ad5-a825-4762-a10d-4bf6e371f889", "sighting--265a2526-93e1-4d79-9f21-a0a025e28814", "sighting--67a5d96d-52e9-4416-bd3e-4ee9cc7c43a5", "sighting--63e56d39-ea59-4e11-b7ce-4b6963254d92", "sighting--3cad9c7f-621b-4889-be86-8351d8617b29", "sighting--5586aaee-4619-4b18-a3b0-df6143f45c41", "sighting--82e70339-d115-4acd-9456-27291813c49a", "sighting--7d2c8d89-1de8-4661-bb8f-0bee3d318e5a", "sighting--6bccde24-8570-4840-a519-71cfa909e67b", "sighting--f7e8c901-54a8-41a3-99e9-3e0ce45b93f9", "sighting--872d31ae-56b9-4ea3-811c-15e2c2818c4e", "sighting--149e1df5-dc46-4877-a43b-bf61b9f032fd", "sighting--37e5b0eb-e792-49af-b3ff-55a611d2090f", "sighting--4519e047-f1a4-4b1f-8364-294447b9f605", "sighting--d955212b-3378-43e6-aca3-7a40c127cf72", "sighting--95667818-efb3-43ed-96c2-61415e4c4b33", "sighting--5efabe0d-7883-4f89-850b-7acfad85b969", "sighting--b49d60e9-f139-4fdb-b833-e399086184b3", "sighting--9be46097-6423-485e-9a38-ebe6426f65fd", "sighting--f2596581-bcc4-4753-a8e4-d9b798d09446", "sighting--9017e2c0-6609-480f-875f-f0800f4c4f3b", "sighting--7a881f8e-0670-4591-8b9c-f245ce62fd4c", "sighting--18c1d873-a03b-4d54-81a6-c0cad9c50c0f", "sighting--3b83467d-9594-4f21-8b34-82513f50c05e", "sighting--5b1f4870-4901-48c1-b3f4-51c8763bbf34", "sighting--3d6b5283-6db1-4acd-9b9d-b1751d581ab0", "sighting--84f3b957-841d-412e-bb14-63ef728ca4fe", "sighting--a37a1fed-5d4f-4043-b0c8-5e57c4100bb0", "sighting--6ab667af-b602-41f3-86d3-53a151bc68a2", "sighting--33a76306-6a06-4758-8dfd-b804ad119439", "sighting--744bbb9d-0166-4080-b8c8-039356945fad", "sighting--59fd2211-2740-4caa-bf49-7bd8cf4f4da7", "sighting--6cb6601f-b3d9-4ca9-83a6-a2db37ae3b7f", "sighting--2c0eb8c5-f734-47f5-bf62-70f675fa76d1", "sighting--e238b984-8b81-4f88-8d9a-49937a00513c", "sighting--93a0f928-e6aa-45be-9087-c573926b47ad", "sighting--82b58b4f-dcc7-4af6-aa9b-6df51168a8d2", "sighting--b86d0594-23a9-4302-a090-af50a38b2583", "sighting--88587f83-10f7-4666-a0c0-2e8f5725188e", "sighting--8e56d0a4-aa09-4419-8c3b-3e641dea1c7b", "sighting--dc07aa66-a328-4b33-9ce8-ec754bcd7c4b", "sighting--1a289983-1d93-4247-8fb2-50c370aeb486", "sighting--c832124e-9f8b-48b6-8e59-8e61cb35eb29", "sighting--6486dde3-c588-4265-ae48-c037f8b39641", "sighting--90fdc13e-35f5-44ce-8408-e6daf17a67a7", "sighting--fb7097b7-bfb2-4a8b-ae8a-b1b5ef6e9ac3", "sighting--3a10bc7c-aad3-4873-a1f3-18719f7dd680", "sighting--30f76eb2-6cc1-4629-b623-fe2766cb4524", "sighting--d5e3bf9d-de61-4c4f-8f6a-894ffb4a68b7", "sighting--279b7309-39ab-4f68-8e3f-649e8f87ce6b", "sighting--d7acfad6-cf74-4549-be32-73f10e6f99c7", "sighting--6667b703-0de6-47fa-a737-1e1d25a00402", "sighting--727cce50-c5c3-46f3-9290-d7e8213ee10e", "sighting--f79ace18-e2b7-4674-9cdc-9d58155c5dd3", "sighting--89e07c40-0884-44c7-b500-27ac1ac7392c", "sighting--1d99ede5-dc5b-4af1-a779-8bf52986b77b", "sighting--f6caddc5-369a-4ebf-b08b-b7bf22246a93", "sighting--aae47f4a-de8a-430f-a3e1-8cef8792feeb", "sighting--c9d8bc23-3161-4326-8baf-8ea887f490ec", "sighting--70df0f9c-c867-4e02-953e-d79f163ff531", "sighting--c3bd319d-8790-45ef-83f4-120065c03400", "sighting--c875682a-a256-4026-ad16-facb03301890", "sighting--65551a01-9366-4c80-ada0-1d931ff72fbc", "sighting--342a667b-1de6-4f30-8868-ca7dd14b2c14", "sighting--94629fb0-780c-433a-acbd-3783ba9401df", "sighting--88118c0d-42e8-4268-994f-47a800bfacd4", "sighting--2e12bd01-2d9f-403f-bb27-64a71e6830bd", "sighting--246e5cc3-2342-4885-9d88-237989c86388", "sighting--d11aa1d5-db43-4e33-8dd8-40081fda0f02", "sighting--69debdd8-0b02-4a89-932a-bafae1db9722", "sighting--22776f9e-cd6a-4d53-b7d4-90dc49ceecea", "sighting--8120379c-6044-45a5-863e-a06a000e3705", "sighting--3e50f37e-b247-4fd8-99dc-6cba958369b5", "sighting--123fc5b9-e92c-4726-8424-acbc547955f9", "sighting--7b8d7b89-3c8c-4c23-a2e7-26e8e48265a9", "sighting--fbc6b86f-3391-4f01-88be-f83febcca045", "sighting--064fc967-1b6c-4f48-81e9-1c6c5e9f7b36", "sighting--c6d57a68-641b-4e98-a0fa-a0ae9414d5fe", "sighting--24262008-5f14-4fe7-b1ff-04e35ed7c4b7", "sighting--16f06f58-ffc4-4fee-8b78-11131fc10aac", "sighting--9227a82b-2ef9-49c3-bdc9-a3bf09aabdf1", "sighting--1dd6e21b-a9f2-4dff-aee7-f521dc3ec1fa", "sighting--f31118c1-c30d-4521-935f-15593e716cae", "sighting--83c75e9a-e288-4ce1-8eb2-864065a5be45", "sighting--0fc3a504-5ae2-4d62-bf22-d3958831fea5", "sighting--b9b1fc7a-edce-4a58-aede-ac04c7045a79", "sighting--fa13bfbb-7380-4dca-9117-9a9533d3ed79", "sighting--076563ee-4ef6-4e39-80eb-643c5fc3cca5", "sighting--eda71a70-b893-46ac-9d13-7c53b1ae72e6", "sighting--f19b9f4c-fba1-4c16-a719-d64769884c08", "sighting--fd970041-3bc9-492e-b84d-032cc0e59903", "sighting--d3fa40f0-036c-40de-acba-7566fbbd0547", "sighting--6917ffbe-0741-4426-b7a8-7c2c42c26884", "sighting--3f8f06af-09dd-4731-aecf-034083f94e82", "sighting--3da4ff8c-bb03-416c-b3c4-63fcc6614564", "sighting--b6794925-005b-4a5a-8511-d0ad1eb7e105", "sighting--13789ca8-b4e6-4f25-b74b-873e9565be82", "sighting--28d3eb45-f457-4c65-9c75-169b81e94183", "sighting--5148bdc0-f685-421f-85ca-9a19b722ff46", "sighting--4c8eb486-7027-49ec-9edf-6ebcdaf39349", "sighting--d1eb3755-91fd-46f1-b435-dd4f0d60545a", "sighting--6fedf917-8d48-4f40-9574-59ed195daaae", "sighting--c0462de4-48c4-4971-9718-747a067f804d", "sighting--4848ce79-9f7c-4806-a838-6fcfbf4c4cea", "sighting--0eb2f391-ac93-447e-9feb-373236f4a677", "sighting--5316f60e-09d0-407b-95ba-bdeb7d31959e", "sighting--3206b206-405e-4821-a767-5394210f8dd4", "sighting--432e4935-cbff-4809-bde0-a71933db594c", "sighting--6f2114fd-0313-4e89-9745-45054c83fbdd", "sighting--ab0c7b8f-474c-422e-9146-5ab0724453f8", "sighting--ae97f58e-c07b-4663-a17c-6e8f4f14bd13", "sighting--4f6f4081-bcd1-49a4-a89e-03eff73a45ab", "sighting--566e8716-0f26-4159-a06c-376bf75c4632", "sighting--ff9b1c48-9edf-45e1-b168-de56affe02a6", "sighting--943a9c58-6245-4255-9367-dbd729143bc0", "sighting--bb7b32f3-1237-494a-ad5a-a71f480fac15", "sighting--0fce3a0d-c962-4edf-92f2-42fe6bc4f07e", "sighting--d431e923-3af2-4c22-96b0-5de29da59cec", "sighting--e5d6505f-f8de-4cc0-aafd-317c62c7d6ca", "sighting--a89ea981-b57c-4e54-a73a-b1b566510994", "sighting--108285ff-23ed-4350-b288-c9e7bfcd2515", "sighting--3abdaa24-3ce1-48e9-b410-99a763343e69", "sighting--21a1c619-b833-464a-a22d-dc7f0a9b4ed5", "sighting--f2c48d6a-d9f1-4b9e-809c-940c0fad014e", "sighting--69849105-4aa4-4021-808b-4ab2cd26d68d", "sighting--7fa7c7de-f7bf-41e2-8c3f-f95f33290049", "sighting--aaf3446c-2573-4a91-9c8e-d3f7fe6b3d3c", "sighting--fe2aab8a-32e1-4ddf-8bba-bd0b3b27e304", "sighting--9af6723d-6c2f-4917-b567-fbd398e52c9f", "sighting--7591b990-2a78-4fba-b0c6-e554e2d8c26d", "sighting--e1bc7552-78c1-4253-9910-bb6a78abcc43", "sighting--a6781352-4e9f-408c-9b5c-37a2922e9640", "sighting--b6384088-733c-481e-9779-c0e928722c48", "sighting--629540ad-bee2-416d-a72c-ce61d0339e12", "sighting--040ddc99-b812-48f2-b371-3c53e1b1e48d", "sighting--0f4587c9-8786-4e80-b634-f8f3f2285553", "sighting--1ed175f8-705f-4980-93d2-c81d15c91288", "sighting--9ad161bb-04da-4ec3-a8a3-32cd4aacb434", "sighting--3228eb20-e3cf-4ce7-8c4f-885d275b59f7", "sighting--8560d1e5-6fae-4c90-9937-131c12728a51", "sighting--10b5d555-008e-4148-84fa-61f25df5f662", "sighting--e464af87-873e-42f6-b668-d63777f8911a", "sighting--07f03fdb-b204-4eaf-961c-713fc18f1aaa", "sighting--68ec1458-58d6-4db1-8e22-3a3343a8705b", "sighting--799810df-4aaa-40dd-b5f0-f239163b401e", "sighting--102a7897-49b9-48e1-b76a-eac4e106654b", "sighting--c660a096-73ad-4cd2-ab07-3186da77c18a", "sighting--7ef9ce2c-356b-4cee-b8b1-8ab5b86e0263", "sighting--4dc3e3e9-a18d-450a-a261-3fbcda59c4c2", "sighting--c2a6ccb3-c9e9-47d0-8c3a-d376781e6f05", "sighting--80a7b7e9-f50c-4236-b5cd-d8971403ed0e", "sighting--253dbf38-4029-4078-b97a-fc9c77b80b01", "sighting--adc94a35-4cc2-48c8-84d2-1210eb8f4b78", "sighting--afd054e3-ec5d-4329-aa4e-2a9bc767c735", "sighting--65d0ecc1-56ef-4460-8878-0aa2d689944a", "sighting--0e28b128-8070-45d3-a2bd-6e44ae4a419b", "sighting--f53dd355-d1a2-4f4d-9d91-216308005cbe", "sighting--cf550b15-658b-4e2b-b423-588f06530e8b", "sighting--dfbbe222-1580-4b05-bd7b-d8f13ec46f5b", "sighting--311d5b5a-194b-48f3-a2a3-333beaf1e8d1", "sighting--4b237c3b-4c1b-4071-9279-d2a297b13ec1", "sighting--b779e248-79ec-429c-b8d1-6fe1472396a0", "sighting--38057b5a-01a9-4268-bb14-767d7af8ece5", "sighting--e4425c02-76a8-4e1c-aec1-55ebe2d84fd4", "sighting--20f3a9c9-f713-4a4a-8fdd-bda82163cdfc", "sighting--9d9f3f81-a901-49c4-af9a-404104b73c48", "sighting--70276994-2f5e-4617-be72-0c51b686c7af", "sighting--a01af109-9669-42b9-ba8a-def75165f9b1", "sighting--c49f3032-f00a-4889-87e0-82b93a8470e9", "sighting--2adb5eda-abef-4b53-af65-d72f42e8c5a6", "sighting--f74a5861-9db0-4acb-925a-aa0435b377ef", "sighting--59d34e20-053e-48fc-b5cd-95872ee38436", "sighting--c720b944-fcc8-420d-b414-60027fd4148e", "sighting--70eb7a1e-c81e-456f-91f7-80d46efc4443", "sighting--2fdc1c1b-2254-47a7-9fa7-8e1488acd764", "sighting--a66bb5e8-a262-401a-adc2-d03bc25712f9", "sighting--8a40ac4d-8c52-462f-b8b7-5e23d1f6fa82", "sighting--206af910-d276-4144-8443-379345b17e57", "sighting--a3f0fac4-7fbd-4479-9e24-ef9bcfcfba77", "sighting--26dea9a7-d033-49fa-a8a6-0fef6d5f2de9", "sighting--0dd0f992-84f3-4b7c-9042-a9e2cc68077f", "sighting--120ddf0c-f916-4668-9815-c438eb9c77b6", "sighting--1dfac8ec-ca0e-4f89-9679-2f45cb5f6116", "sighting--a3f166c7-c430-4b36-8ed6-f743b8c4fd94", "sighting--4ce03664-fe46-4e89-bb74-db84d7c5196a", "sighting--bc01f0a0-41a6-42d6-9d9b-de6946de481d", "sighting--37c08d33-5677-435c-a5d1-23954d789466", "sighting--7c4405fd-6d8b-4b43-b807-6a187b7bab45", "sighting--0df4abbf-117a-4237-bd80-60ed930be7f6", "sighting--3054fb42-874b-47d6-8c16-0bde0a96f599", "sighting--00e7d109-a8c4-4662-997c-c6ee2af1f8a9", "sighting--b6ff35bf-2d3d-45c9-a2ee-80cf93efaa70", "sighting--57daafbe-8f43-4250-98fd-1c3247c94333", "sighting--8065def5-c904-4091-a821-7053b8f1994a", "sighting--33a3f97b-05ef-48a3-89c5-c31d6799bbd9", "sighting--7d6d0939-54c7-499b-a259-4dffbfa087e7", "sighting--6e87270f-4532-47f6-aaa7-25e7e3311123", "sighting--487f353a-1f8d-4fdb-872f-f848f8f91f59", "sighting--9344d5ba-8283-48ab-a3ba-a4ba0f20c7c4", "sighting--35cead4a-f9a7-4ded-b79e-50a632535116", "sighting--b5774c68-75c2-47ba-89ae-bdc45b7a4f5e", "sighting--321f9086-396d-4bb8-9dce-e426fc4e525d", "sighting--116cff78-205b-40f0-a290-84d8d6ec61ad", "sighting--27984223-ca9e-4543-9285-04b8032a241b", "sighting--9d802376-8920-4ce9-87d6-f212fd765a50", "sighting--fff6c7b1-e829-4f47-806b-4f6e7215cbf9", "sighting--b8804e30-7ab4-4519-8865-da9d9c0a4e67", "sighting--bea0c2fd-93a7-445c-8d2d-f635c7365f66", "sighting--e77df8c0-1088-466e-8387-070e8b8a7526", "sighting--6f921f44-d6ff-4743-ae7a-fd78b8ada9b1", "sighting--1aa8e735-75e4-4429-80af-b68b8a30d8a3", "sighting--02a5d1b4-db9f-4dc8-ae8e-1fe74f07bf69", "sighting--23db8693-297b-4be5-b513-5fd5385662dd", "sighting--c0ad8fc9-409d-490e-986b-14e1a5fd5b9e", "sighting--46d7e947-e856-4f78-8219-a8ab9b4c8f7d", "sighting--d9eecf3b-bcb8-4dc7-97ed-0fa6bb9ba745", "sighting--cef8bfca-1a9f-4ebc-8362-f6d040c35de8", "sighting--8c0940e7-fcf6-4dac-baf9-84df4dbfcede", "sighting--533aacd5-b440-4bd5-a7f7-adfbde7f31ad", "sighting--eae7ea65-6322-4a42-9a0a-e13fa3713f8b", "sighting--706fdc20-f6de-4b5c-b3fb-b98793f0674a", "sighting--1313dff2-bee9-4620-85b1-1f733cf62154", "sighting--8415e859-86c4-4f47-81dd-722a58e10283", "sighting--35c09717-b78a-46bf-836f-b5d934dac048", "sighting--3bffd727-1a90-40cf-a610-871578179218", "sighting--f92371cb-8053-4d01-abac-0c061833db5d", "sighting--8a81f944-3ae8-46d4-b280-b46d6112c5d4", "sighting--58f3a7da-edd4-4197-b1da-c9896e21165b", "sighting--959156ca-54d0-4c8d-8f0a-769c99b2cb43", "sighting--e09f1695-e143-4ddb-9c18-7d8437d80796", "sighting--f8a62b4b-db4c-429c-95f9-81c9201fde4d", "sighting--87e55838-6edd-4e05-8092-3bbfe81f51e0", "sighting--6c1ff35f-7319-4700-bfa9-83b74db71aec", "sighting--5b0ecb2c-b20f-4b21-ae0c-7ee84d31987b", "sighting--57dae650-b65e-4964-b6bd-cd25943b394a", "sighting--05da397f-8dc6-4352-8bf0-2921fd08a025", "sighting--0b3655f7-1713-47a2-9409-a539162f2804", "sighting--22fd29d5-3fe8-4b20-85d1-50b94de1b5ba", "sighting--d637496b-563e-41bb-af8d-42712f148af3", "sighting--de3ec5b7-6928-40ce-8155-53ba3492b257", "sighting--0bc44cc0-68ad-4bc6-92c2-0ac6e2395784", "sighting--5660c53b-8433-4efe-998e-5b211937087f", "sighting--617da369-c877-4eb9-bf0b-06d46a0cea23", "sighting--74abb404-b183-4cd6-8010-6f4fa60a837a", "sighting--802dfef6-118c-4d45-ac98-a9157d481e67", "sighting--cec96bc5-2742-4c44-998f-5c2bd7ae4653", "sighting--1c03ccb5-6b5c-494b-adbe-a6439832790a", "sighting--03bdd36f-ba97-4aa7-a4d6-17c81d8d21a2", "sighting--7c078c6d-3ff3-41e5-874c-b0c3fabbd1f8", "sighting--a8365ae0-8cd4-4381-a8ca-241735f04229", "sighting--5909a55c-5649-4825-844c-c952c955253d", "sighting--c96bafe6-6873-461d-938b-f080655aa3ab", "sighting--2948ce58-fbae-4860-8c0d-56f52824f8dc", "sighting--92b21ec5-00a5-4fb0-b952-d6435e74fe3f", "sighting--21df847a-b3cb-4af8-bed4-6fd68382aa9d", "sighting--811089af-51dd-424b-9402-2594bfb4cd27", "sighting--34ee19be-7e2b-4d35-aa81-e37f94dc627b", "sighting--46f8123f-4957-4d29-92b5-060cb575b235", "sighting--d513b3a2-208c-4ae7-ad06-96379826fbe2", "sighting--4747ec5d-8020-42f0-8acb-cca27dd88470", "sighting--ba61a389-ab9f-4c8b-931a-13efeb38fda9", "sighting--f047fb17-eb20-484d-951d-67237416c73d", "sighting--3ef01433-6998-4149-af4d-1868ec41bc13", "sighting--576c8238-8da3-4acf-9704-a549f94dcc2c", "sighting--71c04fce-6362-446f-ad90-f381dffc56bc", "sighting--e71af0ef-131c-4c1b-8ab2-66aafe6560da", "sighting--03abb561-1a9f-45f6-8c1d-fcdaf6d5d764", "sighting--c699f73d-357e-4967-92c2-f55d471d4712", "sighting--fca69a62-8738-42c2-bf4d-fb7249a8a3da", "sighting--2aef68dc-ae7b-4c2e-9c2e-ce380159dfdb", "sighting--b6990eff-2099-4275-ab55-1254ba8b11b6", "sighting--901c2357-43cd-4303-8758-62f810a28728", "sighting--46a89414-4e0c-4173-9838-5c5b10ba6522", "sighting--ea91755c-4071-4d59-87c6-c580e15c745e", "sighting--6ac3f6cc-dc3e-44ae-a1d8-89604881a7f8", "sighting--77c557e0-ab60-4506-900d-5d7e3ffe4890", "sighting--762643f4-318c-4eaf-83a1-a4f7f60338ca", "sighting--6b1ced79-9cc5-429e-aa56-fea8ed351803", "sighting--e3f11bb4-ee31-435d-8046-e15f49722038", "sighting--4f0f0f80-26ad-4b4f-976c-844c221ef375", "sighting--37f3043c-3a2b-4036-aafe-60493043ddfe", "sighting--179f2916-e5ef-431d-8861-f4ad398d69d6", "sighting--b816b06e-2a5c-4732-a0c4-cbff033c2aaa", "sighting--bb0cd759-3210-4b41-9ca9-1b614d8fc0d7", "sighting--f14e9856-0478-40e5-af9d-3c69415edec5", "sighting--98aa986d-0a93-4993-94b2-dc772dbe13b9", "sighting--1bfbe7ad-1443-46d8-8b8c-7eae2e59a029", "sighting--8adb27d0-8252-4175-8b00-1f102e94c5a7", "sighting--efecf846-bffd-49f4-9c5c-21ceae2d2d8a", "sighting--26150012-eaeb-4323-a41c-8fb7be819031", "sighting--a5aa8d9d-e123-48bb-b6d8-21f059b45cac", "sighting--7ba51b89-41fc-4fcc-bab7-91daade5aa86", "sighting--02d1b015-a5e1-489b-b37a-cc4ee48a3612", "sighting--371b800b-f821-40ba-bafe-673beca73433", "sighting--47e096c8-73dd-433f-94fc-d73b6ebef325", "sighting--19da8a7d-3d45-4472-b79f-7735a4e393b8", "sighting--d3583aa8-c22b-4f26-8f94-0177778281cd", "sighting--3b58815f-e565-404c-b028-a09118e4ff49", "sighting--d809ced6-f596-4fe6-99d5-23410c5ab2ed", "sighting--38c1dacd-07a5-45bb-9582-e6f853ce10ae", "sighting--e0cf2106-a55c-4925-9611-ecdce39bcc72", "sighting--91a67168-879f-4314-907c-eec8a61dd169", "sighting--db989649-f03a-4f59-996f-2e13322cd09f", "sighting--182f3820-93a6-4650-8d10-aec4b1a8e4a7", "sighting--de2f2f6b-e64c-4212-ae2e-76d65776251c", "sighting--16eeddca-79b2-490e-a157-2a8cfae86115", "sighting--536f2443-6f6a-4e68-b311-4f7873a17c8b", "sighting--07c44014-504d-4d02-a02d-5385c8953294", "sighting--763d572d-517c-4683-85c0-2a4c872ee6a8", "sighting--ccbd7903-e6ca-40de-95c8-228f59d1455f", "sighting--fdf6ef42-6a5f-4695-9af3-2966dfdb8c22", "sighting--b4f52c5f-f390-4e5f-be27-997e91d9d0f3", "sighting--14274e19-64b1-49df-8a73-10d6df002ce8", "sighting--03d60b49-1792-4083-acac-654167dbacc4", "sighting--3af89883-94e9-4c8b-89aa-2af61537c887", "sighting--8bb85661-65e0-40f0-9abb-e2748de8e57a", "sighting--e1b8c2fc-8252-4585-81e0-fc55c176c757", "sighting--63ddba19-b034-4027-affa-7766bbac4b1c", "sighting--ef44a45e-fb2f-4d6c-b86f-80d91700cb53", "sighting--21897b7c-0301-4538-b63f-633d0725a3fc", "sighting--bc1713c7-af0d-4ba1-b4ba-b09f6af8f7c0", "sighting--093860ec-b196-4b64-8cae-806a0827b28e", "sighting--5bc8b854-4ba6-4a17-aa6d-0c0a9770a9e2", "sighting--1c016a5d-fe5c-44de-8cd9-db3c7c5a737a", "sighting--708b62ea-009d-4271-8769-dc938fb851ff", "sighting--300521f8-3452-4938-9be3-cbe40fd8f030", "sighting--53381432-8229-45e9-9473-520ab58ecaec", "sighting--ab4dca43-1e47-4243-9e02-b03a8c0b0507", "sighting--3fc28617-fe83-4c77-9121-3b8d255e32e7", "sighting--e15a1279-55e1-494c-b2a0-acb74e7690ba", "sighting--008801a5-4079-4ee1-a489-ec34e4ee9d50", "sighting--43c1e97b-f42b-4cd0-b4f0-86126840b88d", "sighting--50472ab6-e61b-4d4c-8c54-405252661779", "sighting--68c759b3-4ffb-44b1-9130-188b6caeed10", "sighting--1632c6dc-03f8-4a6b-bf4a-54a819165373", "sighting--3b056e80-52fb-49bf-b54e-8d03ed792b90", "sighting--458a380e-788d-437c-9498-723f6eb0e831", "sighting--ca9194fd-e3cd-45f9-90b9-c2a3bb8ab6c2", "sighting--f5ac4a19-7737-4481-bf71-dbc08752517b", "sighting--3a10a8b8-b16b-478d-9d06-96685bb51cfd", "sighting--7e55f72a-c581-4ea0-9d2d-acd5df84fd5a", "sighting--e0c0fc19-0fc5-440c-972a-3c0ce95270c1", "sighting--53ac9fd7-f342-4e1e-b1a2-8b6a625e7962", "sighting--35e30d69-cea0-4c98-a80a-814205374fb6", "sighting--c8cd26d6-600f-4d96-b2dd-23e739f56667", "sighting--f446307e-1f4b-4c68-af7b-9664c85d1aaf", "sighting--f85ef474-2747-4696-abc5-43db04cc276c", "sighting--84c0673f-2268-41ad-8721-e321c1f4f886", "sighting--e0d4a530-7658-408d-896d-b9e9d593692d", "sighting--83dbb5d9-f7a5-4e13-834c-2b53409fb0ab", "sighting--b0f72414-74fa-4f15-8237-44a2b7baf179", "sighting--4d6db08b-1de4-4ebe-8471-4ae5b7a1724a", "sighting--2fa35f05-bdb0-4292-945a-5fd6ecd7f395", "sighting--36cae078-a1a8-4155-a1b3-dcbaf371ced2", "sighting--8869a02a-99ed-417c-b1c0-0d3ad3a9e972", "sighting--e1b35cec-0358-4a3c-a61e-90766321b34c", "sighting--dc265417-8968-4460-a893-fe9d16991877", "sighting--e6ce14c6-e6de-4aad-a45d-3ec6f2305936", "sighting--0bd2b2c7-0f38-4bc8-9df7-3b60113581a9", "sighting--3a36776f-295c-407e-a19c-d71334effda1", "sighting--a949b1f9-b15b-40a6-bc8e-d7622b7a49db", "sighting--664c7cf9-a6ec-443b-9be4-e6d6cb3d9c12", "sighting--eec6f581-0002-457c-9a48-850c883ffe25", "sighting--9ebe50fc-433e-4dd2-bbb5-150d8f8abf4f", "sighting--8dab1996-5cbb-44de-bcf1-ee39d03c3d1d", "sighting--9ff004f0-ea47-4969-8b0d-f6adcdb7a0fb", "sighting--3938ce94-5b75-4480-aebc-cdb35634b168", "sighting--16fc93b6-c6ea-4841-ac58-2baf3b5efe93", "sighting--0c85cb99-1171-4dc7-8290-f1e4fb809970", "sighting--766fb66f-1ae7-4971-8f15-39aeb95ac96d", "sighting--eeb2be2f-9615-47c6-bb8b-8951b02142f8", "sighting--66a3cbd5-f88c-4c8c-8f99-abdc1f41d8fb", "sighting--b00ed096-1b85-4f7c-b2d1-b2f16da70a5a", "sighting--a1e84b06-4ab0-41dd-8ef5-717369ac7524", "sighting--a7b2a6e6-66fa-4163-8530-e4c3e61c0a1c", "sighting--599a93de-b8da-466a-b5ad-c75cc43ca9b6", "sighting--20fc8a29-cd97-44ae-b3a3-ecce8abe7cd4", "sighting--c22e4834-da34-405c-a3d6-3692c2fdd3a6", "sighting--99607302-4976-4dde-93e0-65ac920eb093", "sighting--c62b7c66-df2c-4cb5-9f83-ed8babf05699", "sighting--6849efea-a4c5-4718-bfa4-9105bd011c26", "sighting--10093bf7-e70e-495b-82ca-8a7187b74092", "sighting--e108dfba-af2f-4bba-a718-f9ea7b667b61", "sighting--847f1dc3-7822-4963-8bb9-9258bc5b28b3", "sighting--b4db55b4-99e8-4ff5-ad71-7649fe1514c8", "sighting--ad32fd71-ea5e-42cb-9798-b88bf1e7ed0e", "sighting--2d807076-e44e-4801-a948-2b0cfb64991e", "sighting--e636447b-d146-4d7f-b3b1-352fde10e525", "sighting--a4bd104f-c101-440b-9bbf-ccb36dc34c1e", "sighting--37bf12f4-8d74-42d8-af76-43371a5d4130", "sighting--768dc395-9094-47aa-8c81-d979037c4096", "sighting--5af37186-ba58-48eb-99b8-436a59703295", "sighting--29876525-c616-4b98-9496-06f5747351a0", "sighting--173a74d3-68c4-4362-9baa-2b05b7507e08", "sighting--4b900866-33af-48d0-8141-c2de6a4900cf", "sighting--be4c771e-7e6d-43d5-a930-3c3aa1bf31f7", "sighting--06d88b67-3af2-4fa6-9a6f-17d6d838ce58", "sighting--4ca6a6d4-043b-40db-95cb-0127844b0128", "sighting--3d47b06d-f5fd-4103-b18c-24f88bd3cfb3", "sighting--9695c3a4-2fdc-425e-834d-725605a509fd", "sighting--d2610843-d6ab-437a-91ec-c89fbb2090f8", "sighting--f6a094e5-0175-4487-826b-8be94415a61a", "sighting--1bf771f9-7ead-4f18-be1b-303b754abe40", "sighting--980e5a70-1b1f-432c-9929-d9d5289af374", "sighting--0e366d06-f81a-4b6a-99c5-b2d2401f7d40", "sighting--c7ae7521-1df2-4a2e-9310-7d5fb74db030", "sighting--e4d34ded-a21e-47fb-b69f-5f8664503ab3", "sighting--3f05a07f-f98f-4865-ae59-550a563b33e2", "sighting--107116f0-ccf5-4b77-9abb-e65d72029e78", "sighting--e8f1a9d3-1792-49dc-a88b-7b2a97312e60", "sighting--d3ea9adb-60d8-474d-8ca9-14f0d591c605", "sighting--1da26886-29d0-4973-a521-38d5843820f0", "sighting--9f3b5eae-b192-4091-a4cd-a181139e6591", "sighting--fe460fa0-65d4-470c-bf19-5c7fc70bb7a5", "sighting--2f811a49-0490-43b7-abad-753fd89274ac", "sighting--9d15c476-60c7-45aa-8462-2d68a7247d2d", "sighting--3d72b8b9-e078-48e5-b152-eeb3ec67b209", "sighting--cca26c6f-75cd-4e37-b487-89a6e5405d12", "sighting--c8a54019-315e-42c0-b15a-f6eff7b69cf8", "sighting--580a93bd-e3bf-4401-8b20-61c6cc6a39b8", "sighting--b9312335-1cf9-4baa-b28c-8e62b6d7d3ea", "sighting--067fb0f9-8611-41a2-bdb0-cf384b81607c", "sighting--6314512a-2b86-4c71-81e2-bf328aa8d376", "sighting--94c20b63-b328-4259-9508-daf2135bd4f1", "sighting--0dd7d4b4-e082-493e-a162-82bee5a869a7", "sighting--37b1f9ab-911b-4ef4-b030-09590f3186d9", "sighting--93b38640-efe2-4420-94a5-17570b04522f", "sighting--5ff1c3aa-2089-4a0e-b2ef-534e07cf588d", "sighting--ccc19049-a1b2-46e8-b832-be22eef556ec", "sighting--d0ec876c-e80b-4ddd-9851-56d3c98f9da8", "sighting--a462bd59-96f6-4742-84c0-97bdf57cc5c6", "sighting--2af36a7b-b1dc-4e74-9efa-7abcae682f7f", "sighting--ace9370b-b1a7-4f7f-aed2-d2442467ace7", "sighting--6ae25fb2-2947-47dd-a497-6e5a1d7a3cfe", "sighting--c447d956-c763-444c-a2f1-35ac0e478ff5", "sighting--e304dea7-a5e0-45e5-8f29-f61eab18d4bc", "sighting--b223678e-e4b6-47d5-b3d2-0138fbe05844", "sighting--b63a1a20-4229-404a-b7c2-d90bb418ea03", "sighting--85170b6f-7ab9-4f09-aa7c-7703b8646b9e", "sighting--8462ee2a-aa0c-42e3-a2d3-0563a38ffffe", "sighting--f162264b-5b53-499c-a0e9-3283b71c88d5", "sighting--c4d3c65b-0a15-4702-a4c7-ce045d57f455", "sighting--618dddcf-dce4-4a9c-bc57-42aa70b3eaef", "sighting--132743dc-775c-49c8-9a01-d7bd9c3ec2dc", "sighting--167cbde8-a098-4f7d-aa16-bc36423ed693", "sighting--7a1d1524-9515-4c85-8e78-8ea753ca5377", "sighting--672294db-14fd-4a20-8666-1c4508781637", "sighting--dd3db329-31cc-49d6-8612-f667392e4fdb", "sighting--3673eadc-73d5-4f81-a1d0-9b5f55f40dcd", "sighting--cfefa24e-c644-4a7f-968b-945563dfdd6c", "sighting--ac5b9228-e3d2-4aa9-8e7a-c69eaac5d0f0", "sighting--d337388f-3e82-48a6-80f4-c72621c12bcd", "sighting--74218186-33d5-4c9d-982a-3bf08cdbd446", "sighting--98d3a9ca-bc8b-4389-8f74-f056716e7f70", "sighting--2b0dab28-6bb7-451b-8350-13b3fc48475f", "sighting--0475c525-403b-4f88-8eb4-bd43128b1fc0", "sighting--c50d51b9-0cf4-4e62-9969-62b5df50f62a", "sighting--516197a2-fd9e-4fa7-92f6-d1d1a7d84407", "sighting--b083638b-8079-498b-8c45-c226408eca82", "sighting--0b8d3218-7344-479e-9667-b7687d2f47c6", "sighting--8d860309-5272-43ed-86af-a9746afba0b8", "sighting--103df718-9e2e-4cda-a607-1988acb0b12b", "sighting--da0b0540-14e4-4bc4-8286-f2a2ef35951a", "sighting--eb965ce4-a4f2-4be7-963d-7adf82447734", "sighting--1bb8c98e-c35d-490f-b0e1-c58ec9823955", "sighting--b3247fd6-0395-4de5-b3b7-1bd8017a2291", "sighting--0b5eb2e6-c350-4f63-84cd-fcb73819c4b9", "sighting--54fcfff0-d6c5-4cf2-96b6-ec4e89b40f10", "sighting--eb6a28c9-3ddc-43ca-9c8a-aa9ea8ed801f", "sighting--3934ed49-95c0-4d5f-8897-1328f502ab2f", "sighting--9f35aabd-d2cc-419d-98cb-985a53478f30", "sighting--53d5b887-2d7a-469c-93ed-da5ec326a47b", "sighting--d08d0843-3dc7-4e93-9b89-65de4e4569fa", "sighting--81eea898-69eb-4432-992b-2e47b5543c27", "sighting--e36d096d-4cec-499d-ad86-66004553824f", "sighting--a61a736b-1c94-4961-8535-f0f4cb15003f", "sighting--16eeaf68-4a91-4dc1-b0c7-ac0ec5a49896", "sighting--63c2cf9f-8792-45cf-b249-cd2c8de6b7d3", "sighting--acb654c3-f714-4518-b9d9-281e7c535ed2", "sighting--2aea4641-9086-47ff-9023-1eb858ccc4af", "sighting--0c43efd6-d687-4514-ae61-d9e62a0ef033", "sighting--16fe6e53-cad0-4dd7-b6cc-d2225f6d3600", "sighting--d66fd855-58ce-4a8e-859d-5be61d50d618", "sighting--1fc99063-e30b-4ea7-bfdc-56413e3848d5", "sighting--c6461784-c209-4e7e-9d61-e396046d878c", "sighting--eb3b0202-60ce-4506-b1d8-28c8fbb1e747", "sighting--738e8064-42b9-41c5-a886-255de4aa1ca9", "sighting--a01f8b20-30d5-46ed-bbc0-cb2cfa50cf9d", "sighting--e32b3aa6-8908-4be2-8194-cd57a95f141b", "sighting--2c8ae8d6-ef9f-4cb9-b858-d7d4219e2f76", "sighting--0ab982db-f50a-44b2-9caa-afa513293c77", "sighting--17fb57c3-a851-4190-bef5-5a6c1e8185db", "sighting--32d1d543-a76d-486a-b21f-e1de8e36d5fb", "sighting--a62a401c-7714-4bd2-bd9d-73290900c345", "sighting--705a8e1d-df4d-45f2-ba12-8a73d6428f65", "sighting--726e3838-79ab-4334-828f-9873d6c733e4", "sighting--71fd6e09-5a4a-494a-82cc-e1f268bc882d", "sighting--62a8e679-d68c-425d-9b25-03b8ef116c6c", "sighting--838e61f5-e930-47db-abce-bb5ef7244546", "sighting--4669f902-3f3d-414c-b346-2e868bd323dc", "sighting--4fecea0f-9a6f-4172-af35-baee92fc1b06", "sighting--9becf42c-5e5b-4600-b6a5-a8cd76d0b31b", "sighting--666f25ab-236a-4ddc-ae58-17bcf1b94c1b", "sighting--b2d5e682-ab33-40a8-a441-c40a49740861", "sighting--b1e8c028-8554-4802-96f2-b4060d81f3e1", "sighting--f7790119-77ff-465e-a3b8-1285553111c9", "sighting--35d6a131-85f6-47c5-b8b6-ea1249f2869c", "sighting--9f532529-001d-4fed-b084-25abb81763e3", "sighting--f1deda12-e98a-47ce-9df8-0a17ddde104b", "sighting--7ca853a7-448a-42ad-8228-f6b0bd544ac4", "sighting--e2f84c46-ea20-4120-af10-77ea7c137557", "sighting--4359eec6-86f5-44b8-a993-8733e9fc25b4", "sighting--1346b3d1-fdf4-426d-ad6f-910ccf36c422", "sighting--6f0fd736-bfae-4978-ae40-40e2712783f5", "sighting--605c680d-7c34-49db-bf20-3fe7b17488e3", "sighting--33291811-ccd0-46a6-b7db-f2a92294e6ac", "sighting--0bdeb92c-93e9-414f-853f-110f18a208db", "sighting--e5cb4c73-dad7-4744-98e2-8373e8473b97", "sighting--b280be48-6dbc-40df-ab47-b123afd44e0e", "sighting--d658a26c-0655-4391-bf91-2b67bbf3b1c5", "sighting--6c234a8b-185a-4f5f-8b76-37c1042b22b7", "sighting--5f087baf-8a31-499c-a7fe-fb26b97820af", "sighting--36db7655-d17f-474a-8e10-4fc2aab5cd86", "sighting--19e799e8-bd75-4b70-9808-f010f210386b", "sighting--56229ddb-e279-402a-b190-0db618061b30", "sighting--9926eef3-154a-4f04-861a-e4099975e7d4", "sighting--c5a460bb-ba7a-4a2a-9c22-721708ab752e", "sighting--6205c836-a31e-4b9a-b7ae-08f4f77ed378", "sighting--dac097cb-b4c2-4ac8-a962-13a82d919e4a", "sighting--2fd36ec4-5663-45a3-9025-299486f4c96b", "sighting--52bb03a5-b6ec-44e9-806f-210ddec12193", "sighting--ebd3b7da-59f0-4c78-8c4b-767dc5a65410", "sighting--aeecce9d-6c42-418f-8fee-4acc07556250", "sighting--2d808450-70bc-4268-96f5-3c941eebe407", "sighting--a306ff3d-6b55-4663-82c5-5f5fb54f8589", "sighting--938aafe7-d7e2-4010-94af-a7a8909c0573", "sighting--5e182097-c5eb-435b-a240-203f8626edb0", "sighting--e0952686-cf4f-45b2-90c5-1bcfd486eb4a", "sighting--8361e6aa-b119-4b48-b0ee-e09f3101d965", "sighting--d0959db2-8c45-4660-81fb-26112b2a55cd", "sighting--561aaad7-d14c-4261-adc7-6003edaf136b", "sighting--a9203ba7-038c-4c2b-a8c1-2417b4f6b76f", "sighting--e04574c1-9799-4d6d-9aea-5e5b447e1d01", "sighting--b9c797c9-72f7-4e26-8e00-46dcec8bfb1f", "sighting--56d9fdca-0cdc-485d-be0c-f4f4afc53e4a", "sighting--e778550f-9127-4f80-9733-322e1ad49485", "sighting--30e5a357-90dc-40eb-ba6f-b34988c771d3", "sighting--8b658f5f-3a06-4ae5-9946-dbcdb1b27e49", "sighting--acab4fca-633c-411f-b5d2-9ae92243a28c", "sighting--7c9d3d09-5139-4e0e-a128-d09b421c97a7", "sighting--a09f6336-a2ea-44b0-856d-59e80a440631", "sighting--a305be7b-de86-4458-bc1d-8ec5ff8c5058", "sighting--06ac4538-14ea-4ad2-8a3c-13b9a92bb6a3", "sighting--cc1817bc-ea27-4b80-8e54-c7495f1c378b", "sighting--f66e87cb-426e-47b5-995d-f7eac9334d27", "sighting--24f685d1-b9ec-4333-ac56-f8a22fd8fb88", "sighting--2f4a88e3-7f7d-4641-8f9c-666c39766fc3", "sighting--013af8ed-a29e-490d-b5be-3cb9e77a0b66", "sighting--f22985a1-80cb-4363-8dde-32750318d89a", "sighting--58ed02f5-8583-46e8-abcd-e987d8270f50", "sighting--8851c8d4-bef6-43c6-814f-34645fa073cd", "sighting--bb8eb2f3-5d0f-4174-b993-654371a12592", "sighting--88620007-76af-44a8-b016-1eedc61d240a", "sighting--29e8e627-0fd2-4acd-af56-ae9ef14bec34", "sighting--e9a6df92-d318-46fd-bdf5-6fe1094d5226", "sighting--711d682f-0730-4d9a-9c6b-e8fad7b49442", "sighting--3cdd2801-8a8e-45dd-a1c6-cba52e36d563", "sighting--af2bbf3e-6ef2-4e08-885a-b6db0d989b1e", "sighting--724bf0e3-6f16-493d-91e1-d0f9c0805790", "sighting--fc972aa2-a4d0-4c32-8435-df7d1b714358", "sighting--bf03c5e2-bc08-4db6-b6b0-be70b2a6cc23", "sighting--49902677-d1be-4176-a3f2-63f0a5ba7077", "sighting--0963fd9d-ad03-4545-8f64-1fb73cc83224", "sighting--1d3eb8cb-8084-4b07-9fef-851670cbebe7", "sighting--cdc79ff0-aa3f-4c44-b3b1-e161989135e9", "sighting--b0291d25-c811-4007-befc-503202389f57", "sighting--cfe453eb-67e9-489e-9db4-0d8173d46689", "sighting--037ca1c8-17a6-48b4-8b67-e1db38211194", "sighting--f97efd8c-3612-44cf-8218-6283a102a8be", "sighting--efd266e7-8ead-4b41-9b69-9144638d5d2a", "sighting--39f9437f-0267-4645-9a31-575eeb5a16d7", "sighting--a42edfc0-5fc5-4bcb-b18e-9e95802bac87", "sighting--5bbcec24-d181-436f-b2d9-9fbe90c646da", "sighting--7f38446e-8b6c-40b5-92da-11a89e066b44", "sighting--06379d10-33c2-4340-8440-b3c40827e2ce", "sighting--b7ce8681-1249-428b-8f70-c8b7ff79bbf6", "sighting--f6e5d180-2f62-40e3-b554-76a340809345", "sighting--cab0e301-e9e2-430e-ac9d-8d33b0f14971", "sighting--d2e67e11-b04d-41b7-8e03-f2dbfd2b0cea", "sighting--6769dc74-bd40-4271-87f1-f5ad67eec285", "sighting--44292c83-2d4e-4430-a97f-eab92067c56d", "sighting--fa40193a-828e-46dd-a741-c9752189b3a7", "sighting--e7ffe8ba-4b62-45d7-8b09-b41c4ec8f5b3", "sighting--4a53e13a-3298-4488-97d4-ca7c55a3610f", "sighting--ac5c7e85-e0d3-42b1-816c-aa3803b6f985", "sighting--4e6a5a6d-572a-4ef3-9b9b-c12758999610", "sighting--5b7d534c-5470-41a6-ac68-9f3f8aa3726e", "sighting--3d90ed6a-82d2-4304-af4a-c401660bba00", "sighting--8396ea24-fcb3-4adc-87d4-28f21ecfe99a", "sighting--0833f6ec-7498-490b-8685-b0e8cb849b72", "sighting--c3aefeb1-6fa3-4194-a383-8ad2eb0ff466", "sighting--e71d89ac-c905-47e2-92e9-87f5dabca84a", "sighting--17a4452a-2291-44c8-a3da-ab40648888cf", "sighting--ea6ed794-ba33-4951-969e-2a7ef51a4c22", "sighting--64055b2d-7e71-4301-a70c-5645a020013f", "sighting--3018f774-1e38-46aa-ae46-812b513cf705", "sighting--fe50af72-d41b-4dc1-b33c-3119a046727c", "sighting--fca9178a-2bf4-4881-9e93-eb982644d169", "sighting--cde94c8e-5875-435a-bd79-d3460843927a", "sighting--26a63e37-3d5f-4984-9abc-315ca16118fb", "sighting--ea8813ec-e69f-4c16-9628-d7f44c58b19b", "sighting--8fb02fac-b65b-4de8-a699-697adead9fae", "sighting--ff49d85c-256f-4074-9edc-b42d01c4b2e1", "sighting--0384ab68-4f85-4a6f-8f3f-17cd996f9d7d", "sighting--be03a742-dfaa-4221-ad95-7b13e8314ae9", "sighting--569a547a-0fb4-4ef9-917c-2f6e6b49a0fb", "sighting--9adb36e5-b19a-4e98-ae22-0f065c784e8f", "sighting--aa1dd6d6-bf71-4ff5-96e3-098b46480f89", "sighting--b0cf6810-b2f3-4d82-97c5-0a4b7b035e95", "sighting--06069dec-07fe-4941-a860-6fdede03972a", "sighting--126b9fc3-7234-406c-b371-a7c8c87c4ba0", "sighting--09301001-24cb-4df7-9562-fe6835505d3f", "sighting--53d764b1-c624-4aee-9c6d-6e5774f0a1b4", "sighting--a6daf7c1-520c-40e2-ab68-79931107a609", "sighting--d15f95c2-e7e0-4d49-90da-a5b0dc450b15", "sighting--eb6c0bff-ebcc-48fe-9188-5247e70959df", "sighting--e3823b40-57d3-4cfc-81fc-737499e4a60e", "sighting--84b29d92-612a-4a4d-920d-36985fe801b9", "sighting--88998ffc-773d-4dbd-ab42-94ad787053c2", "sighting--413eb2c2-cfe3-482f-b006-3cf315f864b1", "sighting--f90ed359-df66-4fc3-a45c-0ef28e46255f", "sighting--4383ab73-d1eb-412c-8519-98cd9c1322bb", "sighting--a3bdcf83-696f-4605-8707-bd8288f9f01f", "sighting--37194ea3-01c0-417f-b77f-3b9d81e47eb1", "sighting--7919f070-f565-4d0e-b369-67b9a53b19cc", "sighting--6b8e351c-28d8-47da-9d5c-1fecf5e3e055", "sighting--30c77a7e-0e34-4b51-abca-1109faf80ea1", "sighting--e133d590-9049-4067-8a45-c479b4a99533", "sighting--22133617-597f-40a5-94e5-529c688d4df7", "sighting--ef7bdecf-b26c-43e7-aed4-08060137ddf2", "sighting--31c9fa62-461c-43d7-be37-9088bd1dc5ba", "sighting--a32912ca-9ffe-469f-9d33-33df971fffca", "sighting--f9ec82d4-92fd-4346-a77b-7785e51c748f", "sighting--8a6703aa-4a7b-442c-950d-3af5679d4abe", "sighting--8c4296bb-8b79-450f-94c4-8de42ce99237", "sighting--366a6749-8657-435c-877f-7b3dae5dfa5b", "sighting--9ac47a08-e00e-4df8-93a3-4dd749d860b5", "sighting--212b23b7-49ee-460c-9cb1-304fe076058c", "sighting--ceb9eb09-ab42-42bd-a883-76cea9e900bf", "sighting--c3497525-c84c-486e-98cf-1b2ae1958c46", "sighting--986b0784-74cc-472e-9817-38ff1d6cae97", "sighting--4a999f32-0e6d-426a-8e16-f40306a66523", "sighting--95edb725-baff-4a95-b725-360d85fab8c3", "sighting--efef938c-0bc9-4225-82e8-1f68a9dd965e", "sighting--7b1a3a93-d0a1-44a6-9081-485dc7970887", "sighting--dba583bb-0362-4d34-adb7-aa7c5eb8b1a3", "sighting--edd8b08d-dca1-4c5a-9632-46101c0d131c", "sighting--be31bc6a-3115-4695-a565-49f568d31c8c", "sighting--8dd62d5b-3cfa-4a58-bd76-1d4487baf091", "sighting--6ed68ce5-1c55-4967-acab-5412f7d34608", "sighting--a3600107-b31a-4ea6-9609-aece158cce2a", "sighting--f49aff17-2048-4c0f-b909-c91ad8262c06", "sighting--5d9d5b41-782a-4027-ad98-5e128e390df3", "sighting--d61a6d58-6a20-4b59-9634-acc2dc912bbd", "sighting--b9fb98d0-f86d-47db-a946-7a82ce72b000", "sighting--00247690-9409-441e-bfb9-986977be8a20", "sighting--01ced3d5-b4c0-4ce7-a042-94f654d8d973", "sighting--c24163f9-9ba5-41f0-bc69-17117f761147", "sighting--d654b066-3e9c-4bf6-97c8-995b9852a644", "sighting--c600b5df-c5c1-4e5b-95be-b29fd9f998c8", "sighting--a60b15cb-e33d-4f70-898c-ca8b4c1716ef", "sighting--4855e01a-1896-45a4-8f63-708ff7ef342a", "sighting--954a854c-ec18-48ee-9f82-5db6e679ea7d", "sighting--e80d4708-d62a-49bf-96e8-b444e28e796e", "sighting--2f9e0043-d05d-499b-be61-ba4805e760d3", "sighting--3703bf81-5394-4224-8078-5ec427161eb1", "sighting--d54ba614-a96f-4563-bf4d-6b9d5a7ea407", "sighting--3b2351b2-8f06-4167-bd32-13772723c330", "sighting--7ef7fc50-3e42-451f-a298-6961cf3bb420", "sighting--09caa70d-2931-4b97-a6e2-0c63a88da64b", "sighting--eca9ea32-8bcf-4397-9fe6-b047f8713ea9", "sighting--546be0fb-4075-4f2f-a532-1abba9fd82b0", "sighting--8a8dde71-630f-4d84-8370-17ba4febb2c1", "sighting--bd0534e5-7801-48e1-b656-fcc79008cef5", "sighting--22342125-e27a-4f99-98c9-ec4b0bc971e3", "sighting--e511ee4a-565a-4b83-939a-123b52462fe8", "sighting--6ddc9422-c08f-4f2d-ba22-1b3682709d97", "sighting--9e93c13a-22be-4b91-a7ec-9d769bea629f", "sighting--c11a2599-c6b3-4f9f-9904-b481f3410d07", "sighting--5b931d27-623a-4bde-aab5-07378da5e74f", "sighting--6dc7097e-6b64-40d8-b199-27f9b847e6e4", "sighting--35370d17-8a5d-4143-b79c-7265c0d678bb", "sighting--19ede274-3708-463c-aec0-da24b224923f", "sighting--40c5ab84-6c30-4a5d-aa44-f6b89ecea3fc", "sighting--49eb2999-b229-4e39-a481-edd7df3e5b62", "sighting--ead32c6b-6659-4512-9ef6-193e7d3ab2ba", "sighting--7fe59bb6-9028-4f10-af81-259fb0c4c035", "sighting--92429dd8-5c10-4b43-8dc1-6144c44c6548", "sighting--2433a4c5-36cf-466a-800d-e92d76c920f5", "sighting--6de85594-9b9b-4f50-abe2-54de4a65d5cb", "sighting--f54b7e56-f9ff-4420-9ebf-f38dba35127f", "sighting--7bcbf9a7-8fb8-4f40-a8ef-e0bbf774adf3", "sighting--618ea5ac-3740-4e7d-9ee9-0b53b148f842", "sighting--c6bfc2bf-9e14-4ddc-bd84-3f42788a2a0f", "sighting--b0229da3-4d94-4067-b797-c81c8b5ac182", "sighting--705dcdf4-82bb-4682-af94-171c643144d0", "sighting--243a6818-69ab-4ebe-83ea-cbcab025b1a5", "sighting--3034d98a-b24b-4b3a-b9fa-39bf1f1815ba", "sighting--d3078e28-d92d-45e4-91f2-c843dbd6e7ac", "sighting--8d820f92-abf8-4ed6-97f7-6cf9fecaba02", "sighting--87198ddc-b338-4f3e-a733-09b3b1555587", "sighting--73e7e33b-04e6-4fe6-b13a-1a72c16dbbc2", "sighting--b45f9302-2aac-487e-8543-9df8cc98068d", "sighting--c43425a3-b8cb-420b-9e0d-9bd7c7f5f94b", "sighting--bd3a82bc-29db-4b13-aa35-3091c9cbd291", "sighting--2a03984e-e36a-4785-9b60-cea8ac1d2cd4", "sighting--3cad2dc2-5f4b-4391-81ed-d070733e4bc2", "sighting--fe2c8d18-7b26-4b27-9054-61af7d5c9b88", "sighting--ebd406fb-6154-4e93-9057-4e0a66651fce", "sighting--2629c04d-6f60-48c4-a66c-95b2d867fcb0", "sighting--60d70a03-1286-48ef-bdc7-21e07f1ae701", "sighting--a2ce0334-5440-4dbc-9ad3-b02db49380e5", "sighting--b2ed9440-aa78-494f-851a-426416946269", "sighting--8a718854-65a3-4992-949d-a74c07cf0267", "sighting--e6de1293-62e9-423a-87a3-1b44d95a8cee", "sighting--59c40e12-3ed7-48c1-ac44-01f093a4e69e", "sighting--c9aca493-9358-424e-ab83-ef6a691e964e", "sighting--508f7b32-f2db-4787-ba60-316d6ade4e88", "sighting--4f441fc6-a5cf-407a-8bca-06033913bda4", "sighting--32b813e0-1b44-4ef0-a3fa-a7a88416697d", "sighting--181ffdc7-f8c3-485f-aa3a-f220279a646d", "sighting--d1d2baf9-0c59-4f70-bc26-be72317374bb", "sighting--14992563-a663-46b6-aed6-a2abe77c6ef4", "sighting--82c6ffec-1838-42ac-b724-35175ecdde72", "sighting--5bdeaf93-15b4-4a94-b118-3b49bfebec22", "sighting--5c0b2ff0-ea1a-470e-87ab-e867874d266f", "sighting--3c3726d4-5eb7-47e7-abcc-dc6c739ce954", "sighting--c72301b2-4e8f-46ad-a4c6-544940827b93", "sighting--d014e765-6932-4e3d-8fea-9ec1a9414d1e", "sighting--bcc11ebf-5330-4437-94a3-736f4c4e10ee", "sighting--d12723e8-cc5b-451f-8e12-1a41376d3444", "sighting--fa75dc65-72e3-4bb6-a819-9600b8234f0d", "sighting--7fc6fe66-5f0d-4289-83df-468dab974edf", "sighting--4f14b588-7893-436c-b843-4b000b5ab91c", "sighting--3fdf7f82-13bc-4f94-b8e2-aa5535156ede", "sighting--038a67e5-a572-4b3e-88aa-6731255c24a9", "sighting--e6402c6c-5ac0-48b6-a858-f7dee40a3124", "sighting--42c77802-082f-41bf-838b-6f6eaf03ec83", "sighting--aaf3ddb2-f6ba-4a34-b79f-f213393888a0", "sighting--b4816179-cfa2-4011-8173-6f4c460b1605", "sighting--b213ea16-c349-4db6-b71a-597cb3678dc5", "sighting--bacee7bc-7730-426a-bf7e-02e02e95abfa", "sighting--7e183ddf-8326-4530-8a94-2112e1cdd495", "sighting--cda55708-7727-460d-8010-029d49b9c703", "sighting--d655218e-2ee4-4f93-86b2-feb38d17cd60", "sighting--9187b505-50f9-424d-aaa2-70d99fc133ad", "sighting--7b0b0755-66f1-4d1b-ae68-618adb559db1", "sighting--c33d1a69-7938-432b-ba4b-7acfc47e5592", "sighting--1816a3b1-a150-4d3b-832d-5d3f08816de5", "sighting--c9855877-0fbe-43a1-88e8-d08c93653f2f", "sighting--dc60d9af-d981-4ae1-b232-6995db378c8a", "sighting--1091e0cd-0826-4863-b2aa-bb4e19285650", "sighting--fee69d9b-3879-4716-9462-bd8845195d8a", "sighting--7792d9ec-77a9-4e02-8d42-73c8a34dddbf", "sighting--ff9dd4fa-d265-4ecf-99b2-15fb68398d61", "sighting--d8bde116-9a4f-41b0-b8f5-a18714fb48db", "sighting--61abc97e-1a79-4afd-929f-ba41928a37b8", "sighting--9ec145b1-5f1a-4819-8234-7af58709db33", "sighting--e820801c-b48e-4459-84b6-4cc675bcd62d", "sighting--a12beb58-a940-4592-bd56-a8af83a5f83e", "sighting--43d633df-d0e6-4778-b8f7-2b9956723b95", "sighting--645adb54-399a-4bcc-9d23-980482c99ea5", "sighting--544d08cc-70f1-42c4-be95-ed2d1f752874", "sighting--f4c3d403-7776-4b63-bdb5-0accb0f32cb4", "sighting--a9125944-a4ce-4967-915b-8613e3c9c58f", "sighting--71bc3de4-f066-408e-af7f-d151d3b59017", "sighting--2591ea6f-6c05-4b91-9bf5-38a41c5f82c9", "sighting--12507948-4d1c-497d-91d2-4cd7b8bfc5e4", "sighting--f0f732f8-6ef2-4446-abc7-531e7877351e", "sighting--9cd5e5ff-cb74-4095-a277-188eec5c3751", "sighting--912cc161-1a8c-450e-92cf-90f5e91ae593", "sighting--ae3393b2-4dc0-492f-b821-c0e4e0c3def2", "sighting--bb74be67-2374-4566-812f-0ef20252b532", "sighting--67c22d6a-e790-46af-b07c-1c5c00b75756", "sighting--45247d6d-fd79-4ae6-8907-0ddef2db8b9d", "sighting--0f8b88a3-3287-4350-856d-d12a29a98ecb", "sighting--9380dc24-6cb4-4c38-8f5f-b6286eaa8b16", "sighting--a05fbc7e-68d7-41b1-b2e8-d7cd319792a6", "sighting--c59ac2ac-3883-4cc8-9f99-3e91e5dbaff7", "sighting--619181ef-3a33-4661-9b6a-55934d03e14e", "sighting--6c1c4722-3ac3-417d-a47e-b40dde2f516c", "sighting--b13fc4cf-36f7-497d-ba35-149ba2d15a9d", "sighting--237960c8-0494-41c3-82cf-11294ed6f555", "sighting--056d718e-21ce-4898-a8d0-b355beadac7b", "sighting--8f4728cf-44fb-4423-b110-64e2e3db3125", "sighting--13e0bf64-8e32-4c97-91d7-e184bf2db8c9", "sighting--afd2765c-a63c-4716-80f0-c3589dbb79f3", "sighting--1f208efb-6e29-4598-ac6d-fbd2133b6035", "sighting--edfb0717-9b35-4115-8867-4fcf63b62967", "sighting--73983f45-5053-4d23-a63d-7c33f7c1c376", "sighting--bf304d17-a3cf-445f-b5f9-eaa18415b5bc", "sighting--14a49a0f-edc9-4c01-874c-116a1cdbb205", "sighting--dbe52d61-6c33-4e45-9906-9ad05d6918db", "sighting--d3dd28c4-f5fd-4ccd-a7c1-1f3e8c5d94d5", "sighting--fea3f2e6-3319-4c28-a778-ce8e0b47af35", "sighting--b526d821-4977-412b-9227-a6c61fbc840d", "sighting--d3224e94-bb32-4019-8a6d-997ac5775374", "sighting--8dc033db-6d2f-4950-8670-9cbc9d5359fe", "sighting--fa08ed8b-59a0-4fe0-b3d1-eafef9ef71fd", "sighting--326e834d-83af-432f-b990-f291a4b18c9e", "sighting--03e3675c-428f-4491-90d3-73dbd6be1867", "sighting--056d9e26-d3dc-496b-bf0b-1bd681b5b542", "sighting--8d01f622-c930-4b51-87ee-7e91a19543f5", "sighting--60aad08e-fbb8-453d-ae20-5e9d7837c5ee", "sighting--280f87ae-6bbe-4f71-a6e9-aa18fffb8e9b", "sighting--bdc5234e-d5c8-443d-af79-e91bc3ff22c3", "sighting--627b8dd9-e266-4b21-917b-dee203ea5238", "sighting--7bdd8be8-b0b7-4244-9090-152e993c43a1", "sighting--5bb9be43-5e7c-44e0-a535-b041875381ce", "sighting--c5549666-5957-4090-859e-b75ec6a13166", "sighting--b0daaa09-1009-4712-b8d9-995804049b8b", "sighting--acfec124-f107-4b86-9b1f-1b50745ee23e", "sighting--4e366acb-32e7-46ce-ae93-3edbdcbccd92", "sighting--bf9777e9-856f-47f8-a694-712a730ad9c3", "sighting--1bdb9659-79fc-476b-a0c3-db779a757a65", "sighting--dd91fb96-9320-492d-86de-c76cf23ee0fe", "sighting--ddc68948-2c8a-4264-8b9d-290d4211d677", "sighting--e0b95579-a63b-49c8-8ecf-b9d0379b3258", "sighting--07abb854-9149-417e-b6cb-6872c9c66d95", "sighting--1eb243ff-1f05-437a-838b-1aacabe76ce8", "sighting--c5b1c57a-dd1e-4b28-a84a-73738a0333bd", "sighting--962e8b8e-0730-482c-8cfc-0b56bb3cc9b6", "sighting--99eae8bb-99a9-4117-89a2-b5fea25fc25c", "sighting--8323f636-8652-4f2d-92a5-127a093f1f90", "sighting--e850bb85-ff60-4fe2-9808-8fe724f79f48", "sighting--644ab0f5-5ea0-41f7-9d62-72160a65fe9d", "sighting--6c597cdb-33bd-4c52-af4a-bc19ecbd4d8c", "sighting--4ca6ad69-85a7-441f-937a-b64891e48d70", "sighting--dc86e0f4-717f-4a16-b7fd-8e1e0eaa1419", "sighting--bb7fe5f2-015b-4415-ad55-4893f44ce874", "sighting--062841d9-2a73-4012-a6f9-81597cb7a890", "sighting--c4f871b4-20a6-422e-8745-4389a626dde3", "sighting--414d43e6-0509-4889-8dcb-4a85da89a986", "sighting--27f8c8a9-2db9-4035-89ec-58ea65da8d68", "sighting--12f66b9f-919f-46c9-9ebd-ed7001d089e3", "sighting--9d1f0254-fd6a-4ee3-9ad9-456240b50e8b", "sighting--6a79af84-7def-4175-87c5-c92cde05dde2", "sighting--799abec1-b0fe-44df-9939-16294d5ecbd2", "sighting--6717a8c9-c62c-4213-a4fa-02465c0d7306", "sighting--c027a484-6ca8-4535-84e1-71d480567fc9", "sighting--78efd9e5-a7af-43a7-ad0e-c6b276778693", "sighting--d4a75662-453f-4211-8ecc-beb8f2b9aef4", "sighting--25d8a9d5-c170-4862-9f9d-4fbe590ea7e4", "sighting--8403fa72-555c-44fd-8f02-eef1deca323a", "sighting--35783a57-4223-440f-8205-fe5b71df873a", "sighting--66ac4f58-a2a5-42d0-baf6-9e4b82ceac67", "sighting--ce453ac2-9d6e-4603-b1a4-dde64c73cca8", "sighting--ad259bed-5a1b-42f0-af8c-26022fc2dc8c", "sighting--4084a652-ae5c-43c0-a356-23144b769aaf", "sighting--e303d008-aa52-44c5-80c5-8f334e483e82", "sighting--ecc83076-bffa-4608-be25-b354e4a23218", "sighting--96c6ed8d-dabb-41db-80c1-8956e85727f1", "sighting--574053ab-68cd-4e95-bff0-a0d06ee22cb6", "sighting--bb1f5e15-92d4-4c3a-9ee5-8130c1a854db", "sighting--c58647b6-4c30-4648-bf81-8a5df325c33d", "sighting--62ccafca-03cb-44a9-b24d-15e139549f66", "sighting--8c02499f-5b9a-4ba3-b375-069b9b42c714", "sighting--89c455aa-36d5-46ba-a608-5af4636689b0", "sighting--2e7fe63c-f755-4921-a846-f506653c29ec", "sighting--62f0fc15-9bc1-49eb-bd09-9f21e3cf47c5", "sighting--31f55b03-4174-4844-bb04-7bfb4ae4454a", "sighting--34afcafd-9c65-4335-8adb-682b0a2df9e6", "sighting--1c0aa72c-e9b3-4246-b1a6-6d1124aebc99", "sighting--410bb46b-0ca7-4b5d-813c-25ae6a57828a", "sighting--4d5f9d14-98ea-47a2-bcec-d8a022e86ff3", "sighting--cf9ebd4f-81c0-4f8c-9d5b-80b0a126961d", "sighting--12b2cf5a-5260-441a-94b4-db613a125372", "sighting--9bac7152-1bb1-4c4d-bee2-3c1affab59ff", "sighting--68b64c2a-4d42-47ee-a457-31a1af10cc84", "sighting--64d46b13-b035-4c85-8842-bfe75e4b603c", "sighting--123720ba-29d9-4e40-805b-a7e9f39f0a4e", "sighting--e4d36675-386d-4450-997b-0a2721b0b17b", "sighting--9c6379f0-b576-4eee-a277-bd967fc21a12", "sighting--3ecb9f10-6933-46ba-bdb0-f05243cc7bb7", "sighting--612eaf52-6f8c-48df-92f9-4da5c1e9ab07", "sighting--874d57b8-57e2-4f88-8014-40c78bb5e877", "sighting--46c22fb0-3c92-4449-86e7-7704e07a6495", "sighting--1ce917b5-36fc-4619-939e-814564e06e38", "sighting--c1a8faa4-1b38-48c9-aa40-8ed890788d15", "sighting--338ecedd-c11d-4e4e-9727-363f11c18eae", "sighting--7752d2a3-cb4c-4d70-bd7f-2d8cac69c407", "sighting--b338518b-a771-4d48-bac0-99223d624e0a", "sighting--96fbdcb3-91c2-4aed-844b-81fa5f54901c", "sighting--b99ea9cc-eced-49c4-b096-e7e362218855", "sighting--6f4afbed-80ae-4ff2-97ba-825c0d1a04f4", "sighting--6c70d6f0-7bb4-4e79-9820-560115e1f906", "sighting--18d7510b-ec09-484f-b797-6f99f868c915", "sighting--9654dd3b-04f4-4d95-9644-45d3316017e2", "sighting--2a90c7ab-26ae-4a49-9b4c-db29fcfbf62a", "sighting--8eea0e9f-dafc-4111-bf78-fc8a6a532f9e", "sighting--d2cd2abf-6ce0-4bf7-b3f3-2cecfe3d8307", "sighting--0c2b26eb-cdba-460a-8ab2-d6e8af2a8c2e", "sighting--28262cc9-be69-49f9-a1b9-07ebcba232b6", "sighting--1ec1adda-b88b-4b64-bd8c-db73a8b23ca9", "sighting--3d0ce768-f70c-4dba-8fa7-050462f753c9", "sighting--1a02fbc8-ccaa-4606-ab05-77f27166f96d", "sighting--307f8d1d-7744-4e7d-b19b-b6d355391755", "sighting--33afa00f-d6fd-44fa-be0a-2eef43611153", "sighting--058a699b-3700-4b2d-b311-cb0f47e44331", "sighting--d065169f-8638-4044-a0bd-7acd8bc0ffd6", "sighting--543ad291-1bfe-4213-b978-9142288c607a", "sighting--27a1eea1-1640-4910-87b6-1684781cb2a1", "sighting--1e6bfcc8-b264-4c50-a160-ad391812f21a", "sighting--be1a5bd9-3359-4d50-962b-99cfd820e4dd", "sighting--85386216-5241-44ef-b063-e64d028d3baf", "sighting--80f4d297-d027-4ac7-a87a-4e16deaa217f", "sighting--ee026ab5-b379-436c-9603-702c25076702", "sighting--ba58aae8-ceea-4cc7-88e3-153a091f6b0c", "sighting--faf1f1c2-0343-4277-8da3-c7707c8d545b", "sighting--0501bdf0-3e87-4501-bb35-767b26ed534f", "sighting--bb081df7-0700-4d7b-bba5-f30ea9476134", "sighting--96fb2e8a-6618-408e-9672-a6675dd89e8c", "sighting--420ee0f3-cdec-4b44-9db5-9a6b2b5ea396", "sighting--4ea07b75-6c29-416e-a8b6-9441c507c755", "sighting--fb92a8c1-346d-4622-9514-f61ee691f5f6", "sighting--06779e86-719c-43c6-b015-281b57a757ec", "sighting--d9a8a47a-ce53-4bfe-8e90-1755f27d5b42", "sighting--6cffb0b0-7ce3-440f-a45a-730a8fbc6533", "sighting--92a7a452-1a37-41cd-afca-c40d0a2be6ee", "sighting--02e5abcc-f5f7-4c7b-9550-3413fac94087", "sighting--f969b9a0-eebc-454d-a834-371521073188", "sighting--1d026258-312d-4c3b-895d-0bfdd1abbb6e", "sighting--d5a99eec-7012-4332-a91e-e9f8a053b5f8", "sighting--34d1aadc-65d3-4f9b-bf2d-099e657d22ad", "sighting--79839bac-236c-4eb6-871c-0cd38c594ddb", "sighting--4058ec20-a25c-4725-bb27-243d057e8a40", "sighting--377ab1b7-2862-4786-8dba-6ca5dbe9983f", "sighting--583b5487-89a7-4147-aa51-d4ef1f21994d", "sighting--55b48879-0f81-4350-b7bc-aec3b34b4a8f", "sighting--b8244ac8-7cc3-415a-9b75-9d82fcf9de4a", "sighting--ea268ed1-7745-4fd0-951a-965be1461b98", "sighting--7b4ae81f-fd1c-4f5f-8369-d8bdb70a3526", "sighting--bd5cfd6f-8122-4442-af22-683122fc81df", "sighting--05d294e4-a4cb-4d63-87cf-ea1561077a58", "sighting--b347411e-2d47-471d-b17f-ef7b843920b3", "sighting--bca04409-6c69-4854-a62c-3d25d2420aa9", "sighting--9c9d5a08-eed6-41b7-a982-e10bd3fdd720", "sighting--8b0b7043-93f0-45f1-9610-5d2cd8856db3", "sighting--e1dce2b7-6350-479d-b85d-65b7034c87f0", "sighting--bf82935a-09c4-4198-866a-5f0da3468621", "sighting--2f285436-8cbc-4184-a628-99e71e9c9091", "sighting--3338db13-8939-40d1-a241-aae39808ecb3", "sighting--a7cdbb0b-311c-4517-b96e-f9de1c087a7e", "sighting--dbc3f897-4ccb-489f-b069-9cec003ec263", "sighting--00295658-c850-439c-a59a-9f099b999545", "sighting--a4488e7f-a4c3-446d-a244-28c358d86242", "sighting--4a583204-66df-41ac-b6ea-21cd8496801f", "sighting--fb46a46f-70b8-4c8e-8517-c46ddfd60487", "sighting--c9c58e93-3bed-454b-b831-d3e5165b1b42", "sighting--d6aaeacc-6aaa-4958-8a32-16f355c60ad5", "sighting--8f98faa3-e28a-4282-8231-bfae6a830f8f", "sighting--d90c8c19-0fb4-4fc2-96fa-9ee7fc5a0e76", "sighting--62dc8f20-6e89-4ec2-80b6-920e90ce2706", "sighting--9ecbed5c-501b-402a-a69d-322c4ab524bf", "sighting--daf29d44-04c7-46a8-9aa6-8360e3b6797f", "sighting--e60f1c3a-efe8-4d00-a2bb-a88e0e0a7939", "sighting--d5d898ac-bf21-459f-900a-ce92983f1d63", "sighting--0bde37cf-d196-41e7-a800-8c96607b1e2a", "sighting--dab8f6fc-ab9f-4cc7-8402-f58c3c865d64", "sighting--e62bfcda-052b-4d2a-8c23-960b5b002003", "sighting--4d78066f-2bf2-4e76-b11b-1bb72b81e823", "sighting--385de2ec-e328-4861-b956-69917878e622", "sighting--6f1226ed-c686-4362-b54f-d25f73321acd", "sighting--d27111b0-646a-4b0c-98e3-238f6513266f", "sighting--eca79932-7abf-4735-9dec-47904ac405a7", "sighting--bc5fb27e-8ca3-4209-9812-2306659f6394", "sighting--cfdc151e-0998-4aa7-bef7-c0e8176a0834", "sighting--9c7acab0-d526-46ed-ab6c-efd548a4cd2e", "sighting--6a888900-5bc1-4fda-bc42-24d3a1c72722", "sighting--f4b87b33-9389-4f63-9ec8-7aa73eec0c1a", "sighting--b9a05b1e-4e53-46e6-9196-bf0fb30f7484", "sighting--3d9f8da3-d43d-4e27-af7f-3d5ee6f918bf", "sighting--71211ae0-c470-447f-b7a2-3a116039ddfd", "sighting--1f94253a-f172-44c9-844a-c8134cf931dc", "sighting--af6c01ab-1c2f-49cf-88b5-98716e8186ae", "sighting--e58e94ae-40af-4d7f-9ee3-64e82cac6846", "sighting--2fec31c7-4a3f-49ca-97a4-d1b01000bdce", "sighting--f2f48d80-0539-4bf5-921e-06c89d7ff285", "sighting--051a0d8f-a3dc-48b8-898c-3250610d3106", "sighting--057132f4-23e7-4195-8706-1c4244b783dc", "sighting--f612ed81-255f-4c72-8c3d-2a30d6204979", "sighting--95c7d682-632e-4a3f-85b7-5af2f19a8601", "sighting--a8a3f2db-6da3-4f7f-827f-ca450d2fa0fa", "sighting--ed42eb66-df68-49e6-ba2d-8775c5074e67", "sighting--f476d155-0d62-4a7d-bf28-fffac50c24db", "sighting--d4330055-fab9-4fc4-bb5e-315d1ae99a18", "sighting--b53a843b-cbc8-45f0-b43e-e687a066272b", "sighting--c1a2c6ef-46b2-4af3-85ae-1c3aba99dd04", "sighting--7e5fa6d8-0226-4c76-a364-d25123606e61", "sighting--1ca81484-fa3c-449c-98d2-939519009096", "sighting--83b467e7-eb7a-4503-98d4-b20812a854bf", "sighting--0b038425-d9bc-4d3a-9c6b-61598e5e7820", "sighting--af8ec757-320d-406a-8cdb-158af41d08a9", "sighting--9fec05ee-6758-444c-880f-408077e6f7a2", "sighting--636bbb71-a2b8-48ae-9e24-4852fc89f04f", "sighting--291ae65c-4d0f-493f-8634-bfb6da5782cb", "sighting--09b34917-8797-4ca0-a752-e690abcd7140", "sighting--457024c0-8310-4309-b700-4796ca9a7f0b", "sighting--63a70600-00be-43f2-ac7e-44c77070cc21", "sighting--7a069b74-6ca4-4796-bf24-43ea0b848d5d", "sighting--ce13f5c2-58e4-43e7-b225-210b784864eb", "sighting--ccc85bfb-c830-4870-af81-81c505d3d76b", "sighting--244b8a43-d642-419c-a97c-48cefd35c752", "sighting--7605c66b-f29d-46eb-b936-799e8f7d69f5", "sighting--544c9863-dd94-41e4-b4c7-955d083d576b", "sighting--59e2c6f3-fb4c-4d61-99c1-8400a212379e", "sighting--abc3980f-4dbf-49c3-b48c-5c8d3104b484", "sighting--07202934-19c7-489e-9d30-d3ced86c0d07", "sighting--fd00fef3-37c0-4ca4-be9d-d483a62ae4da", "sighting--79d7de69-5d6d-4d3c-afc1-5a7b2407ed7a", "sighting--df8e86e7-7b94-4e8f-bd0b-67f46929d213", "sighting--c61a8b7e-cfa6-422c-89f1-e6c134882061", "sighting--1ebbd961-9e6a-41d6-b79c-982f30fc072e", "sighting--3cf723ce-e8a6-4a26-ac71-0268eabb741c", "sighting--e57b0319-96fa-4baa-b340-22e9a64adffb", "sighting--88cd53a5-2d1b-411a-a95d-fdec1cd7a589", "sighting--4a517a0a-cf2d-4cae-9971-4554bb0ece16", "sighting--4cd33fbd-f2b1-43d3-ac00-094589c72cc6", "sighting--b08019b0-287c-4d0a-a4e2-4f8d3f72890b", "sighting--6b2a879e-2850-496c-b792-593b106c4805", "sighting--d355a09f-7e99-4513-af89-99815386dbff", "sighting--87f3e5d8-6929-4f51-9e2c-03269c46a580", "sighting--c9149d97-9026-4277-8359-1aa869eb4426", "sighting--918fc6fe-41f0-4bef-b73c-3e2db4578050", "sighting--e4532558-b626-479d-8fd0-564dc9daccf9", "sighting--f86eb1d8-eadd-4001-acfc-a12bd5a306fd", "sighting--c801f19b-00ec-4450-a67d-5dcb3295d35b", "sighting--2436047c-76f5-442b-b715-479e003007a0", "sighting--8d415340-400a-4fa2-89e5-ed1f3c373900", "sighting--f79e762d-cdfc-4f56-bcec-12ada3499409", "sighting--e93d2d00-b0d6-4d39-a7dd-59629dacaf0b", "sighting--63e1247d-98bc-4820-838e-6f05fc430b05", "sighting--91d3a1f5-c7b2-4aec-b022-0b4d13968802", "sighting--2961ec1e-ebc2-495e-a6f6-d62d2eccb68a", "sighting--92a42a8d-b2ab-4dbc-bf60-5b3b6919bc06", "sighting--304a530a-fc29-40bd-b83a-8d286264153d", "sighting--962e7c9c-776d-4b8a-a9e8-eba61f5be481", "sighting--16003e31-348c-490c-9440-436118ec0725", "sighting--6f1fa369-146f-4e7a-9869-13ca6a8f867c", "sighting--896fecb9-de5d-42c2-b781-f34f63722fb4", "sighting--25b50463-f9ab-4048-aed4-938a294d0f24", "sighting--eea8cd49-6ffc-4668-801d-031eaba6200b", "sighting--8f8d8d6b-a934-44e5-9675-522288d45d59", "sighting--8fd54da5-94dd-4126-944f-5343f4c9f8b8", "sighting--fd8ee083-cb46-400f-8b2a-866c92ba4cb4", "sighting--79103416-0243-4605-a82a-07d2070a78f7", "sighting--ee6562d1-d826-417d-ae7b-101f347b026e", "sighting--1c5d5c2c-4c1f-4ed4-9cc5-76aaa637fc22", "sighting--3aa2b421-cdd8-4588-a5c9-6f5f80f2cbad", "sighting--dca57a2e-f53c-45b7-bd82-03a8f845402c", "sighting--71d2bc05-c3f8-4a75-ac9a-044422f4d4c6", "sighting--60c3c00a-4587-4de1-806c-e13b5e2f02ed", "sighting--4e9b2bbf-17f4-4ac3-9ccb-245c5b7ed417", "sighting--601faa83-e643-4822-87fe-25b91b251ae0", "sighting--f4836bf3-a758-4be8-b5fb-883219f5dfbc", "sighting--9000f5b1-1570-444d-9673-e38157dc0e6e", "sighting--37ae1571-0025-484e-a1ff-a6dc333ad2f0", "sighting--6e2dca72-ea6b-4a6f-b38a-f51881d3aea7", "sighting--55f4d0f6-87d4-45c7-a531-2bb083f478ab", "sighting--b3679f5e-007b-4281-a888-c95cbdc93a5f", "sighting--c7ae0842-a065-463c-8a57-ab2a98233970", "sighting--227d08d6-1cc0-42ec-adcc-13041a13be20", "sighting--20cd1e15-eeb3-477d-be5d-530baaf0d278", "sighting--f49fe4ad-9401-42c6-9865-4f4a82db7ac7", "sighting--a7e09cd7-d2ef-4a6e-a668-117e75e659c1", "sighting--7c83575f-9af1-42d7-b8bf-1e50685dacd7", "sighting--2ef78877-7f52-4f77-8b16-42fffa166adc", "sighting--2e5ee5a5-20f4-4181-97db-f4f0948e6006", "sighting--27aea361-866a-427f-a100-6ba4b24072ab", "sighting--ef63df5b-7ab2-40f3-ae92-7dddecc65b15", "sighting--316b9b86-032f-4ac2-aa24-4b9853295fda", "sighting--6031f97f-4884-4571-b295-8d4f31935d56", "sighting--a7a5c6ae-53fd-4a53-8721-ee85396c885a", "sighting--f52d7fc1-66f7-4e4a-971e-1b1c7b4a3e1a", "sighting--8b37d4db-6e7f-46a0-b179-b46682ebb95d", "sighting--41478a0d-4c5d-4368-ab9e-eae696372b18", "sighting--ee26cf37-716b-405d-a118-ad9c151da1db", "sighting--9346a3ba-1561-4280-ae72-0d9468b575e0", "sighting--f14b07a3-23a3-499c-8d3d-f96808d34ab2", "sighting--418a893a-6205-4bfd-b4f0-2bb7fb82eb21", "sighting--92f97033-c2b2-4bc1-9f61-d656de1ab152", "sighting--00088f78-ae24-4f32-8ac3-2751c235908c", "sighting--77b5cf85-86f4-4e6b-b6c4-f980012992ac", "sighting--1ea0c2e0-322c-40c9-b421-887f2b24362b", "sighting--13a41a6f-d0bd-44ff-a308-e6c91678cee2", "sighting--405f88bc-9691-4ab8-98fb-327ac3cfba90", "sighting--1731720b-af92-4e9e-aee7-c5ae78fa354b", "sighting--4d3aaadd-57f3-48a5-bd5a-492c40a86265", "sighting--9fd08a16-37bc-42d0-b9d9-cdf4d15c3f3d", "sighting--f6804b9c-8865-49c2-bf46-a83a7cf494e4", "sighting--9b8e2e60-60e6-4a62-a1f6-bae1997321a7", "sighting--c62fe04b-8a0c-4434-9505-fc0032bdb368", "sighting--e1ef2c4b-2b85-4442-be28-9964deb3eaa5", "sighting--5086cddf-4a72-49a5-a5fe-6e26a0baf8f1", "sighting--d5f5617e-bf70-41ad-b96c-e8fc7f390961", "sighting--18f5d38f-7876-4190-aed8-33451ee01a0f", "sighting--0e3f5ba2-cbf3-42a1-84f0-5771f5421822", "sighting--94941995-d477-4506-919d-3348ea0e3fe3", "sighting--88f19948-5a44-4613-8cd4-cd9c077bdf81", "sighting--cd785082-e846-457f-b306-53aa0db6f1d3", "sighting--10f19583-a825-4c8f-b6e7-a16f8a020274", "sighting--da86c56f-bae3-4950-aef7-b368e2c217c1", "sighting--baeb0c27-403a-481a-b39c-265ec894f76f", "sighting--058eb5c1-af87-4204-aaba-e3a488aa67a8", "sighting--84b9749a-70e4-4be7-9dc0-5e2689c2ebc6", "sighting--d01afdde-ddb3-4191-ac12-67436c007df3", "sighting--150b3154-5b94-41c1-ade0-040b7005899e", "sighting--10a3ae68-9c97-498a-92cf-7e2ceaf46ed4", "sighting--be58690e-b53c-43e5-8adb-6e4ec0e71ddb", "sighting--8c95fe81-7b48-4e3b-9b56-3b25f6afd500", "sighting--3d668bba-873b-44f1-9e68-095f6669fe4a", "sighting--e19347fe-d464-403d-9384-c0a28a26570a", "sighting--15f0492a-7816-4251-9884-c8e1e70ea56c", "sighting--ef0cc085-8607-4c4e-a2e7-286cc6ef3d22", "sighting--f43552fa-dba2-47c5-8aba-7dfde69c5298", "sighting--c481adeb-a5ad-4f56-8513-02373e2ca241", "sighting--44c40db7-fef7-497a-a6db-61b9419ab260", "sighting--ca843e77-a11c-4abd-b746-29363c40a742", "sighting--8a67f0a4-0f83-4ca9-bf2a-bcf138377663", "sighting--f5960658-2b32-4074-be02-15820928e6fc", "sighting--d5097302-3974-4ac2-b8c1-4a2dbdb603e5", "sighting--7f9e3fa5-39ba-4905-a735-4376704314ab", "sighting--a472098a-1a28-4052-b3b6-82bda70beb61", "sighting--5e3c87ba-7ab9-4700-8f5f-f002efc87776", "sighting--a48d5be1-a970-4622-beff-45fbc58611a8", "sighting--7555e1f9-15ef-40c3-8965-c33db3389e78", "sighting--764e02ca-3536-4eac-8c5c-7bea07a408fe", "sighting--c369132e-7acb-409d-a90d-f49c3b620068", "sighting--76d76dcf-1bcc-443a-90e0-4838d9e16194", "sighting--b6f147e1-f6b9-48c3-aea2-0fd94e4d5db9", "sighting--3c90d028-076c-431d-be85-e9e8ad0a9fdc", "sighting--414f5d6d-b9b4-4b0b-ab8c-ee70751b7978", "sighting--8f25e3a7-696f-4023-987c-3976c053da89", "sighting--4d1f2cb2-fadf-4283-8cc8-b2d226a18742", "sighting--d33f6109-7120-4539-b819-26818b30ef50", "sighting--bc82207e-fe8c-4c16-9ac4-d9386f90103a", "sighting--4e175068-71ad-44e8-8553-612e2aabf79b", "sighting--9effeb09-e48f-4e60-bf28-81bc1c44627f", "sighting--430d3dc0-f115-47ca-9c65-27db8c0ab5c6", "sighting--2c2d541d-3b9a-4e2c-b6ec-c780b9327a63", "sighting--ed77c895-bd26-4ead-8b6e-bb49cd098a38", "sighting--3c6514ef-6e35-42cc-b480-d697ad08fe32", "sighting--c108de7f-64c7-4f02-987f-d5cdf70f5b55", "sighting--7d647122-2b67-4e3a-9c4b-fc86e1b75e6b", "sighting--e51b691f-ac6f-484e-aab5-a1efc6440bde", "sighting--c5301777-9dc5-4540-a21f-fce1d77f899f", "sighting--6577a662-b3cf-407b-ac31-cd3e7b27bc07", "sighting--e8333aae-6144-4f41-9011-9efad64bfeec", "sighting--f99b51dd-5c00-440a-a6c2-5dce7a7b4e03", "sighting--b6a859ae-2ff5-4331-87c7-d18758e92955", "sighting--d643db69-a85f-4e87-8d8d-db00a33554a3", "sighting--e0b77a20-a42c-4f11-b245-d41c1e50a783", "sighting--23e5ebfb-3acc-4e70-ba1e-c50ada6508be", "sighting--17d0aa0f-c726-4d19-a94d-35802947f1ed", "sighting--16a1b6f5-4b7f-4980-bcd6-35e39733ef99", "sighting--860e8a98-3cea-4b81-a039-b33802fbdac3", "sighting--4ea4d6a2-ef60-4efb-9576-9fa6ef35f871", "sighting--c7fee307-5b75-464e-8985-76c2cd9d6e5f", "sighting--7f92fa6e-5809-42dd-9f54-882e2047cc9d", "sighting--500091ee-f929-48d6-b5d4-47caf3d3ac2e", "sighting--36c42408-f730-4dc5-af68-1703b3838c46", "sighting--4b53ab4d-2ce1-418e-8bb0-eb8c5765b1da", "sighting--a4b0e037-dc9e-44bc-a14a-2d1e624f6c85", "sighting--5d250f32-059c-41b8-a7a3-3271bbe1e69b", "sighting--d09b93f3-2054-4611-9597-32bbfb0edc41", "sighting--14047b6e-1128-443c-8d67-4b68c0cb9867", "sighting--bcd23130-60d5-4991-8d2a-178edc349557", "sighting--2f78fe83-e45d-4962-8cb9-056493c0791a", "sighting--3188b0f6-0f2a-4bfe-8d54-0441e6cccfec", "sighting--35691f53-b31b-437d-add8-3587d7f5b50f", "sighting--91bc9624-e527-4643-a856-e63a302703c0", "sighting--69636a47-e991-4a5e-a4b0-a9fdd1ad7faa", "sighting--5caedce6-4d08-41e7-a8b4-706f34c524ab", "sighting--13a71120-aef8-481b-825b-e6e3d77b0c2c", "sighting--473466bd-9e26-4cde-9a5e-86f18a44abbc", "sighting--0229b4cb-94a5-4ab9-8a41-857634746792", "sighting--7c23e97c-68d4-4799-86f1-d5bdef453a22", "sighting--3c1aa532-8eba-4930-877e-6819117cf69b", "sighting--4fbd3807-cf7f-4c55-a9d7-55c04e25f1de", "sighting--748ce299-3027-427f-917b-590d1820691c", "sighting--981f6fde-fc26-44d0-a407-54bc0e73d0fb", "sighting--879223c5-4091-400a-9522-af97a060a8dc", "sighting--6e35b956-6912-45f4-8c69-0accf48b1dc6", "sighting--a590a1ef-b342-45b6-9d82-da78632e6b60", "sighting--bbfb7281-2fd6-4fef-961e-672ee0ba7b32", "sighting--0c99a9aa-7bdd-47b1-bb24-e84d2576cd3f", "sighting--1d1df036-e59e-4e09-9188-ab7b4893e6c2", "sighting--1d5313bc-c58e-44ae-a035-a721edabbe8a", "sighting--dab66fc7-88e7-4fb7-8597-05e7ea366535", "sighting--341188d1-fdeb-4ab9-b507-2141239733ab", "sighting--03c1d488-e476-4996-98ad-a5fdf22530a2", "sighting--cfbfd5bc-8a89-422c-9958-4bb6148cc391", "sighting--adec29a6-8ea7-4cf0-a5b0-80351b07a4f8", "sighting--af91cd31-9aaf-419d-827c-53bfb0fe2b20", "sighting--ed43c00e-9c1b-4d92-9bc6-c8543c848330", "sighting--5e752b3b-8274-475f-a2d1-6d5fce18b345", "sighting--a9e499c7-7d92-4748-8d40-245842f5852f", "sighting--30d601be-5936-4959-a880-2dd87000c985", "sighting--985e680a-11f1-45b4-8ea9-3be6abe0b8d6", "sighting--c5b3342e-ea48-48df-a0f7-5bbeb54822e5", "sighting--f33b9b93-4998-48bf-a53c-86b1c7dfad8b", "sighting--bf22f51d-4b8f-4581-9cb5-2853ed3a7025", "sighting--64c04160-b855-483b-a829-bec75fbca220", "sighting--aff840c4-96d0-41f6-ac6a-8cd3b762dbb6", "sighting--970ed0d0-281a-47be-8497-0df67a6c32f7", "sighting--db27591e-4faa-49ee-83be-7e02115a7172", "sighting--c85a9607-0274-416a-a85b-7d91393785c0", "sighting--84d1e0b9-8df8-46b6-a273-57478aed2224", "sighting--540eb273-efdd-4ca5-8513-92184db40c9e", "sighting--f6458aa9-d560-4ffd-b22c-fe82b0feffb7", "sighting--ee5033ab-f3f7-43d9-8cdb-03a13111a69f", "sighting--36b5f501-1ac1-42c8-a41a-9c64aeba3cb5", "sighting--411d3184-acc8-4b82-a999-e8526f14e1a6", "sighting--a2c79315-bdef-448f-b5cb-f17d791c0582", "sighting--fef6d1f3-dcad-47b1-a7ad-6327d6eb94ec", "sighting--f262733c-d57e-498a-acc4-63c8b1482c5e", "sighting--5dc07a5d-6c8d-42c4-89b2-62364c13612e", "sighting--53350c0d-5dae-4a1f-ac5b-0f8851ad132f", "sighting--39cca84c-3269-4c03-9f36-d0b6f0c4a46c", "sighting--b0af62cd-d069-4d45-98e1-3e9764bc2c89", "sighting--b6e06a7b-a5de-408c-b274-f21f042c5f13", "sighting--d38b9992-3f15-4d0f-9002-1a988817fcc3", "sighting--18bea85b-6442-47b0-9a19-d0afce79d155", "sighting--7f4431d6-4fc0-48a9-b498-ac9c090da6ec", "sighting--59453a89-4e7c-40bd-ab79-96ee99af915f", "sighting--9946ac4b-bcd1-4133-8808-3cdb77173ded", "sighting--cba30ebb-0d2e-4ded-911b-c2ff6db3d44e", "sighting--c371629f-e67a-4a87-948f-021256cf8828", "sighting--e4a0aa4b-3384-4f85-9142-fdf6058a2ec8", "sighting--0436da1a-045e-4148-bf6a-f9e56dd9fb1b", "sighting--d059672c-16ca-4c2e-a249-53f23c041c7e", "sighting--c3a66c3b-f58b-4fb9-9356-0eb34e01a1f7", "sighting--01d4b11e-bba9-4fa0-8354-abf0f7c64c20", "sighting--4d729519-74c9-484d-a2dc-7fc6f10019f5", "sighting--979d6865-a885-4a86-ae0a-748c7744ea20", "sighting--cd2e78b5-2657-4d21-926a-e801ba55c8b9", "sighting--d7a9d7e4-c426-4dc8-b210-31c296225681", "sighting--3f4827a8-61d8-4c5a-98bb-7ab854fcb301", "sighting--28c3d4f5-4ed4-4c9f-867e-85d19cce9114", "sighting--17c401ef-de4c-4d1e-b182-89be656f993d", "sighting--d64c9ce9-7a98-40f9-91ca-5ee035c96071", "sighting--e916423e-5bc9-4b21-bf9f-f746eb6dc4c2", "sighting--d9a998a3-a3dd-46a9-86aa-159aaffb38fb", "sighting--988779b8-bccb-411f-ab41-2a0a8a43d403", "sighting--6c3ec671-6eb6-4028-be85-dc88acb306f2", "sighting--540d4521-766c-4bf8-bd9a-47e327bc2dc5", "sighting--0fddba9a-f9f3-41d5-9624-2219194e335e", "sighting--9226a215-d30f-4b77-a67a-fa4669c0a677", "sighting--2781d087-fd58-4baa-880f-ddf46b520740", "sighting--3af868d0-1fda-46bd-af40-de7092484123", "sighting--91c3496d-3425-4cbb-a895-ab438888387e", "sighting--47082e76-6b5c-446d-b2e6-1c60bcd6d214", "sighting--be5f8d9a-418f-4232-b875-028f8fa892a2", "sighting--29fc4ccc-82c2-4193-b985-124e3f0979e8", "sighting--6b46983c-9f05-4474-ab1b-8b07a47c05b9", "sighting--890bf73e-089d-4258-9457-eacb1148eb9d", "sighting--8be86572-6da0-488a-adf9-05af7c5a2131", "sighting--a2eabbd1-207f-4031-873f-25f84b3e4bba", "sighting--2a3ec282-4661-4151-a07c-101c6905ea04", "sighting--ab58bd63-607b-4a61-8543-d05eb0e3c77b", "sighting--b82fb835-496e-4ff9-aae4-885714a3fc1f", "sighting--a91752aa-abe4-467d-ac41-a068dd47f382", "sighting--d0e22983-a9d8-4d7c-88ca-c64d2e796889", "sighting--52905952-2e96-49bf-ad73-627b6c112926", "sighting--fc571ab8-11dc-4b82-a4f6-9528006bb185", "sighting--f56452b6-8ea3-42a3-bd29-d2ae36e78d33", "sighting--0e4bca73-ac13-487b-8a58-00fb55bf705e", "sighting--ac032a3c-467d-41f4-afb3-0fd7f0333c78", "sighting--f72ccd38-a440-4083-b999-042c4f16407d", "sighting--13bc5ee0-80b9-46a5-8e36-ce657205a0c7", "sighting--7fad95e3-4b2f-4398-880f-6e1d075dab2a", "sighting--ef9c08cc-a857-4415-a758-ffe73c263bd1", "sighting--5623034b-c675-4e59-a20f-068a1d9e5f97", "sighting--ade155f4-91e0-4e8d-b7aa-66bd4a35b2a1", "sighting--5082692d-1ac3-4583-ad91-be7b2e2e5c73", "sighting--09390b4c-a4cd-4c9a-bb31-a16b119abdce", "sighting--cadf5142-f9f1-4524-9750-ac5d67d80934", "sighting--df689369-fb89-4b3b-b637-bf78e780b5a1", "sighting--3cdb831e-c197-40a1-8c32-bfb9c87793a0", "sighting--0e816af5-66e7-4bd7-b271-cc0643b14e07", "sighting--a5861c43-f931-4de8-93d7-bf1f51ef9969", "sighting--4bc5e15c-f2d0-4ce8-97a6-162abd0c20f0", "sighting--3afb4241-46e3-4107-b9c6-4f5ae84ff4be", "sighting--860d7ce1-6cfd-467c-b55f-e69683196b8b", "sighting--240e23be-84ec-4e76-b9cc-91a174639af4", "sighting--6513944a-2fc3-4d98-8d47-3b5994d9f7f9", "sighting--c97bc9b8-974c-46f1-821c-13a063a80c32", "sighting--776780da-ccee-41f3-bbcf-02472fa5ff0b", "sighting--eb7c582f-03ee-43bf-97a8-68aade275ce0", "sighting--f6058f7e-46cb-4d3e-a399-0f8ecd915251", "sighting--e15e3a2a-234c-4ded-b3d9-7c8885a66c68", "sighting--7dcf4b90-60e6-4200-9850-c9cb2342ad74", "sighting--dd7dc768-0151-4f9f-bbd1-6fa49cb3d1b0", "sighting--1f7b1d05-c77d-482f-88b0-f9a1eb077f1d", "sighting--902d21e1-826d-4ebf-abec-70ca0cc23f6b", "sighting--f264175a-35c1-477f-9c88-9772b60b3baa", "sighting--915d201e-ca51-4da9-b751-4b8e95d1131d", "sighting--eced54b7-03f8-4862-87c5-d2a6b0ad233c", "sighting--2792842e-ea83-47ec-a6a0-7ef7710f11da", "sighting--be313ce5-1da0-44a7-96f5-5e1f81eeb5f3", "sighting--b71f39b0-5ada-44f6-b2d3-030cd947e558", "sighting--71d7d4a0-d8c4-454f-a5f2-ded2dea0c4b0", "sighting--f4fddf53-eda0-4d6e-bf0b-76e6b03f4c8b", "sighting--ac5b1c4e-e1a7-441c-86d3-b5f69ed267e1", "sighting--5fe59b76-3178-48e3-9586-0f7e3568bd48", "sighting--8edfbe50-aae5-4d35-8e0e-91c58db120e9", "sighting--7359451d-41e1-464e-bb5d-5c8ee3d467ff", "sighting--65e8e6d8-c6a3-4070-a83d-df9bad446692", "sighting--7a3880f7-9697-49d1-bab6-08a19202957d", "sighting--699997f1-1df2-4814-a812-cfb870d8de37", "sighting--852b94bd-356a-4acb-a564-67d36b5c9c21", "sighting--c4f20b65-96f3-4531-9fec-4d8489cce39b", "sighting--aa963165-3c55-41ba-8ceb-9f7c5f7efa76", "sighting--0d3a3d8a-1839-4c0d-b44f-f5c85c74ce0a", "sighting--00d70bde-e0e4-40c0-af0c-d858266cd25d", "sighting--8dfbed97-7871-4d81-98a9-1be01b1f6363", "sighting--7f6012bb-7db6-4a2f-9a21-8f5d14a7761b", "sighting--adfae0d9-fb55-4d2f-bf3b-e9a3c5ae24b5", "sighting--41d26db9-a0a6-4fff-90d5-c353dd4b247a", "sighting--ddb6295c-303c-4fff-a696-d113c7344beb", "sighting--455738ac-a484-4e68-835a-6e982c0c9cc9", "sighting--ca39ecab-f37e-449e-9eab-ed7e06ae1a57", "sighting--e84c52ad-73b9-499a-af7a-09a54abcd268", "sighting--e87d3ee7-d915-4c1c-ade9-1ccee2755057", "sighting--5072cd9f-5044-4ae0-8870-6d571aa98527", "sighting--ae148361-0a34-4859-8743-db9236c8cde3", "sighting--3889021d-2209-4cd0-85ec-01232b4137f0", "sighting--a9e25886-ee69-4bba-a55c-18ab162dbae1", "sighting--c3606724-446c-4b43-9493-f7195172212a", "sighting--2a5a1ca3-7355-4569-9d10-e0853ad80f63", "sighting--93234507-3a6c-4423-a7b9-25dcb790ede3", "sighting--3dd4b060-a511-4f93-9350-a2109a57942b", "sighting--c2774367-f648-4bcf-ab98-39627f253999", "sighting--b365b1c0-cbe8-4e25-acce-53eada3a6ac5", "sighting--31e585b3-8896-4664-b76d-dbcdc325f023", "sighting--ea6ee392-6e8a-4a86-8554-0d15545d8879", "sighting--ad826c3d-0391-4c16-81b3-6dcb2994b3c9", "sighting--0e4144d1-e60b-4db3-bf77-41d6b904f3da", "sighting--3db17cf1-5bd5-401e-86aa-949e20c2248b", "sighting--99f2cee2-de8f-41ed-8ebc-c27d391cc85a", "sighting--93b39b2b-3038-4463-b849-f9c6a4f052ca", "sighting--23c15d24-c465-4557-8237-d9b882e6874d", "sighting--48034a69-4734-46d8-825f-ada15009fb05", "sighting--39c26ca0-ab1a-4eff-828e-23ac75f1f4db", "sighting--0bf0f340-25ba-43c2-a292-b359b6c0d8f1", "sighting--9180d1d0-5224-4230-8a06-897f10dbf897", "sighting--76a0656e-ebd0-4537-b155-394f8621b852", "sighting--490973bf-35dc-4164-91ca-274c3e4f1e02", "sighting--68153812-affa-41f1-b3c9-fef47e6a53b5", "sighting--af76a7b8-f93a-4257-969e-8f94a6a1aecc", "sighting--615a7395-08f0-45c4-b5ad-180e478d26ce", "sighting--69765019-5a00-4494-8971-8c1f4112e13c", "sighting--5a5f70c5-c308-4b81-a149-50cc78a88c7c", "sighting--abacff83-5e19-44c6-90e2-043dcb59a756", "sighting--0d4a9d56-15c6-452c-acf9-22d54d36c673", "sighting--70425e78-4ef0-4b70-9101-a6c9ce6bf15d", "sighting--8ea61002-4acc-464a-a137-c320d94cd845", "sighting--a7f8c1dc-df9f-448e-9f46-a0a947032c9f", "sighting--12af1c1b-b17f-4481-b560-ef61a0ea0199", "sighting--c592a641-ba78-4cbb-aef9-4571d8f87f10", "sighting--73a053de-dc0b-4568-922b-142b0ec11e77", "sighting--868da14d-6ef3-4f9d-96ae-b918fe304f44", "sighting--28d8816f-88c6-4207-a9ec-c592d2d5d1b8", "sighting--7f840439-890f-4bfa-89e0-42f16a890ba6", "sighting--eaf8473c-1961-4bf7-a24a-38258a3a5727", "sighting--6aea9744-52f7-471e-af39-db6054d62b9b", "sighting--2a37434a-3e56-47a9-acaf-dbd680b536c7", "sighting--bbb4f975-1673-4f4b-8eba-97342a223950", "sighting--f08ab509-1683-4b50-b00d-41720c008378", "sighting--e069281e-7859-4f77-b11a-dcc284fa70f5", "sighting--e235f051-9b22-4981-b3c2-4f388e282a38", "sighting--14c54752-b143-49cb-8b0f-0bc67aac3277", "sighting--525b763a-66df-49f2-9a2d-9cffbd565bd2", "sighting--02d9ca0e-ecfb-4d73-8def-ae31c0d2bbda", "sighting--8b849495-9e87-4559-a8be-4b1465e3c167", "sighting--0236a2c3-b636-4c4d-bef4-65ddda355dd3", "sighting--935f5cfb-16f9-4637-93a5-019dde9b5d3f", "sighting--9012ad72-a4bf-4bba-875d-c2ccb27750a8", "sighting--ca48361b-1f9f-493d-83d9-aec6c31d68f4", "sighting--676dc2fe-fe25-485c-8f3a-e9687b1d31e6", "sighting--92ddbcbb-7b72-436b-b31d-ee5287df5382", "sighting--5f3a81ca-8449-4493-b816-8778721a4527", "sighting--401742cd-6dc6-46f9-bd1d-ec878471babc", "sighting--d0591182-de58-48ca-9372-b94980a51a43", "sighting--e2bc2f33-b978-422f-8049-41b37321f476", "sighting--aef172c4-bfd7-4f70-9ccc-5b98eafda0db", "sighting--7249eb65-ce9e-4ba3-ac7e-48bb1454d2e6", "sighting--f3d09f8e-e141-4a32-9bc9-666845e6460d", "sighting--fd5053a8-16d6-4bb4-8c40-05a342099b14", "sighting--6781a744-bdf6-4bad-9251-baec406da59f", "sighting--33acf272-bc3e-4568-a796-d6af05d74314", "sighting--da058df7-4b64-4623-9933-7bcf4613a549", "sighting--6b2d45bd-2d0f-4b3a-897d-9fff7b434da2", "sighting--872d1b5b-c57a-463f-a2d4-62520bb52699", "sighting--95415bc5-21a1-4523-8b35-351d63eb97f3", "sighting--28bec5f6-8c34-46e0-b952-3c8d784c7085", "sighting--0fb5a46e-beb2-43c0-ace8-18d3d5b6a580", "sighting--ad1280d7-f8f4-4c25-b4ee-55fad0016f59", "sighting--a89f2046-ac17-47c1-b595-849128b0c2a8", "sighting--94a23ea1-2697-4bb6-a833-5b9ca89daa05", "sighting--4099ff9f-0b6c-454e-b467-4e850ff112e0", "sighting--4d1b1ee3-0f34-49c9-b4e2-07a7fb4762d2", "sighting--4aff7ee4-9b6b-44ba-b1a5-5fb9a1a7d857", "sighting--ff1fc320-bcaf-4e7c-9b50-8eb3e4f32c0a", "sighting--cb4b6ddb-422d-4101-816f-ecfa962bc75f", "sighting--7c82cf9d-c5de-431a-83af-318d24927f83", "sighting--4eadd232-f79d-4e98-992f-2a46604580bb", "sighting--7f9a68ed-e40c-473b-8ff9-b9966050b6e9", "sighting--01522e06-ec15-4ff2-8c78-875689499c1e", "sighting--2ae762b7-daf5-46af-92af-13a12839a315", "sighting--bade49d3-fd74-4947-9d8a-e6b27237c983", "sighting--7b4aba4a-6416-49a0-bb14-d121acd93cf3", "sighting--001b82de-4eb7-4004-9235-ba8a79a40770", "sighting--efbde1a2-86aa-4a59-b237-68f902bcb4be", "sighting--9289b836-5e51-4f0d-bd21-9f1f030f7f1f", "sighting--9bdc2e58-a55b-4fdf-be68-3dfad7c689d0", "sighting--3d3f1111-1bd4-4652-a2e0-72df9d4c143f", "sighting--0d2bfb41-ed33-4c55-b820-19d24c054c63", "sighting--70e68e26-9e1b-4736-9a2a-f06113388038", "sighting--8341a0df-3853-4037-8bf0-f004e57a52f3", "sighting--b1caa110-0b20-45ed-ad59-aa360893c409", "sighting--2839b373-be80-4269-a375-d144a166a787", "sighting--6e6f39d3-7474-413b-99ef-b7b32e53964e", "sighting--d7786198-439a-4456-af3d-f2d7276bb4de", "sighting--5d79ddb4-db7d-486d-934f-aad1477439bc", "sighting--55f4b293-99c7-41d4-805f-af17f1423f0c", "sighting--e6560156-69d0-4811-b365-355a408041aa", "sighting--3b433d2a-9a53-428e-b1ae-4bf8cb248a40", "sighting--3de8a236-997f-4576-a693-2b417fb5502c", "sighting--c2a259a3-ab1b-4d92-b3fe-8ec0e70910c7", "sighting--073f929f-277e-40fb-aff3-d3c9b3b016f9", "sighting--dc132452-d52b-4c3d-ae00-8cd135eeebe5", "sighting--f7ed456b-067b-477a-9583-b28b9867a380", "sighting--72caf884-6cec-48f6-8dce-a71e035588e4", "sighting--64afe324-6cfb-4fb0-aee3-7b85c09c2a54", "sighting--5d79f4f4-6cef-43f4-8cb2-61dfdea47c24", "sighting--1370467a-860a-421c-a74c-8b3c4d832292", "sighting--fd9d66eb-6ca2-4cc1-9711-aa288aa0c6dd", "sighting--44653991-dc4c-4866-b49b-9990fe26b5a5", "sighting--e0d7e982-0a2d-4c03-a54a-058cb5dd17c3", "sighting--b8a14266-b0ac-4b3e-817d-b428d0f3e547", "sighting--c444648a-7528-470b-8cd1-376017e51c61", "sighting--0b351630-a097-458c-b9e5-a97f62da5f5b", "sighting--7c5a9274-9976-4b7e-a9ad-77bafb40f7ae", "sighting--2480b190-5cad-45c8-affe-a3c6b8e9ddca", "sighting--617e4e86-6e48-4d5f-8063-9dba8fbce47b", "sighting--36e5408a-9d48-45fd-b819-1a82ac0d792d", "sighting--6d2ccb05-5bf5-4a0a-bc91-7afb3918ec2d", "sighting--9fea891a-88bd-46d7-b1a6-6264d04d8250", "sighting--41373a39-9c86-4230-8a3d-5ac6f004bc16", "sighting--242d1616-c4ff-40db-89fe-048eae23380d", "sighting--18486ad0-dea0-41f7-9b7b-1c3447a5274c", "sighting--6e701a34-6cea-41cd-8700-8b4392e6d922", "sighting--708ae8df-7078-4c0c-a22c-2724d758e15b", "sighting--4dc03213-0e4f-40eb-abdc-88dabe1a5742", "sighting--2e79d402-ad02-45a3-ac15-371575765ee2", "sighting--2396c632-ad5a-42b1-8db5-7b54f998f75f", "sighting--abec6844-73f9-4e6f-858d-0b42ae6fc0ba", "sighting--0a785058-87a9-41c8-ae71-58ab031493f5", "sighting--5b9a283e-6265-42f8-ac96-eb5633ed671e", "sighting--a2682f61-8b7f-4eda-92b1-aee4893c17dc", "sighting--30c1929e-3eb5-456f-8cbd-64aca167f496", "sighting--7375265e-1ac5-4014-89d5-88ca4bb3e5fa", "sighting--db0a8e27-c051-4a1d-a4bd-5a17670c0522", "sighting--05eb627e-3ac1-48d4-bc8c-b4e9605e4673", "sighting--d483d60a-0b6f-4b41-a054-5f6384305182", "sighting--a9b7f47d-c1c4-4076-9031-f84e802d2fa2", "sighting--db9cb4c6-8e14-431c-a8a5-33ec3e4f287c", "sighting--4bf1ffee-35ec-4507-b5bc-bf0a5673bca3", "sighting--38fe1d1c-5774-4419-9f8f-79702a585137", "sighting--bb88741a-844b-4fbb-a032-16eff6e5e816", "sighting--46cc2f4c-1e3e-4f80-b6e1-2868d154029d", "sighting--ae1d4da1-024d-451f-b29c-391aaa7421eb", "sighting--86f82804-2449-4309-a223-f33590f3e993", "sighting--4c59b15e-01d6-43ce-b63c-aad692e06a96", "sighting--8078b381-da74-48d5-8630-c129b204524a", "sighting--6d39e5df-916e-47da-97bb-764cbde3ca82", "sighting--412e5d93-5cc8-46d2-8016-3e3fcd5bb299", "sighting--c150c1e7-121b-49ae-8e36-79c57c931c6a", "sighting--4f433946-301d-49bb-8c81-58a9833be444", "sighting--733d1be4-0057-42d5-89da-eedb644d1b1e", "sighting--6a14f3a5-5302-49a3-b52f-e0db6b572011", "sighting--5925bd57-b6bf-425e-b007-a91eacc291fe", "sighting--e9c84f87-ac3e-4ada-8245-c1b952807426", "sighting--375e373f-3c99-4b8b-a9d6-ee21da1e0f29", "sighting--460bdae2-a424-4138-8cdb-7a58e34b6f5c", "sighting--bb767080-22b0-435f-a52a-b8cfafa7784d", "sighting--7a876d8a-2675-4afb-a4d3-e32897731a1d", "sighting--d1ab3b47-79c3-4f84-a143-af5b5cd83210", "sighting--f99de2bf-6983-4325-8921-a5e5f2c0fb58", "sighting--7c46eeff-c8f8-46b7-ad71-1a8139593743", "sighting--954029ed-ab72-4a03-ab55-28f9cfdd371a", "sighting--789f80f9-7eee-4d8e-adcb-1f3a8fb7ece9", "sighting--9045311f-e513-4c35-a6d9-edb82a415e40", "sighting--8872ea3e-1168-4ac1-9978-67f4b34f0db8", "sighting--463c2183-fb61-4726-9ed6-d5a295d283a8", "sighting--1d3cb9ed-422e-4ced-abd5-eb812506bd58", "sighting--c0bcd351-d8f2-4422-8c0f-500469fe22a9", "sighting--ca71e7cb-ed72-46a0-817c-ec975a1c00c9", "sighting--5671c833-6599-48dc-b592-d1b00f5faa10", "sighting--09022e5f-0e08-474a-b69c-b29014f8f04a", "sighting--aa4586db-f78c-469d-91b0-4f4ef86ccd31", "sighting--267ea552-8c8a-4161-8fbb-539cf74fd978", "sighting--d9c1de2c-4676-456c-8524-75fc4bf00018", "sighting--5639acac-6778-49ba-aa3c-0be395e3c155", "sighting--af6e2be0-1ea0-416a-8fb8-83f03129cb96", "sighting--9f4c144d-5af0-4c76-b90c-482707786785", "sighting--d4b6937c-84d8-4292-9373-9999fc19c7d3", "sighting--4cbe9620-947f-442d-a87c-8fd55237386c", "sighting--05bcee03-7176-45de-ba71-936094539520", "sighting--62563e4c-7004-4185-bf29-e5eb9a7673b9", "sighting--445e6eaa-6c9f-4d38-804d-fffc7e8e17ac", "sighting--07213597-9026-44a9-b19b-e2521dc04cf2", "sighting--ea7e9403-44a3-413f-8c7f-5a3d650d4c42", "sighting--7108f707-ef90-4858-aa7a-81a254b4757b", "sighting--00967cb5-e4a5-4c9a-9c25-f84a3e0b4581", "sighting--86493975-30bc-4194-b2bf-df01f5047573", "sighting--631f8c85-6ce5-4774-8a69-208ae2d95060", "sighting--123c4d82-4efd-4b0c-878b-18f74ae50035", "sighting--6d1048df-d934-44b7-915d-66ce7f10da36", "sighting--99db885d-0777-4ce1-b916-ba1cb5b9a3d1", "sighting--5f967eeb-f8d0-440c-9d4c-352c7ea33649", "sighting--f1133ef0-e989-4e21-b6a2-5a6ffd221824", "sighting--07466743-c459-4044-a2cb-7ccf3413e1b3", "sighting--c4ec1ba5-171d-43a2-a196-995f31864682", "sighting--e19fced0-f57b-40d2-972c-d3d17fa77ca0", "sighting--deee0d32-d227-421b-8b8c-38a2d6ce64a3", "sighting--cc8ee0e8-a66c-4ad7-afe9-ade892fb3178", "sighting--857178b2-c1ba-4137-9848-2131cecdac26", "sighting--3c0ae747-04e7-490b-a4d3-c3732943537d", "sighting--27791d97-58f3-4fae-be52-634071388705", "sighting--90bdf8df-452d-4e91-b0b7-42b1517b1d44", "sighting--82f1f94a-a888-4d9e-a63e-6c968ef9768b", "sighting--71ac3768-4613-46fb-9bdb-06cafdc24f02", "sighting--c1d0c8ca-15b1-4db0-80f3-a29e3f9eda3f", "sighting--384c94ff-13f1-40b0-8901-67a0baa24886", "sighting--5c9fc7c0-04f2-4550-9b43-90df25b6099a", "sighting--70cc43a6-fd69-4e38-83c8-92da1adf5f19", "sighting--494bbb3f-009f-4dd0-9b11-d43b85a58a4d", "sighting--db49bc28-31a6-4b71-9431-738ffce77e77", "sighting--ff5441e1-1a2a-460c-84bf-c6c08dc28c12", "sighting--478ef54c-16e6-4111-b899-27b6b2ec7b0e", "sighting--3833ebd7-12df-468c-816d-1004ab7fa8a7", "sighting--253bdcec-560b-4eeb-adbe-fa493cb8b6ec", "sighting--a09193da-bac0-4253-81dd-bf4b4be63df6", "sighting--19221a5f-85e9-4a25-8d68-f4384193ae3c", "sighting--f1e1179a-1c25-47a1-823a-b540643d51cd", "sighting--03b0b81e-56dc-403c-994f-c5746537ffe9", "sighting--322344ce-5ed3-4a57-9db5-46586cd4f540", "sighting--a0360b97-934c-4592-9da2-da9ac8c64451", "sighting--180f00c1-43d9-4955-96fe-9f612a246260", "sighting--71ebbea5-77dd-4eef-876b-2e3030dd4a19", "sighting--c07fd8ab-c7d9-47e9-b0ed-e965959d913f", "sighting--5f0c1611-6875-4ca0-a5b3-ee26b7996f72", "sighting--57422a5c-e12c-4c8e-b5a6-6d8bd158bcbd", "sighting--853ce30d-fa94-4bc8-b668-903d81b3205c", "sighting--420f4bbc-9eee-4c0a-b181-3cc5418efa55", "sighting--81a146e8-2fe6-457d-a3fc-2ee56bb54268", "sighting--9817dc6c-244d-4346-b4b6-24fba86e16b5", "sighting--61c18a8f-0d8c-4365-83e3-039f6cd89edd", "sighting--f9748372-67e1-40b5-a4a5-6591b913750a", "sighting--81674790-0fc3-49bd-bf08-4d8adf579bd8", "sighting--459d5b1a-9dad-48c4-984e-cd9a9db302a9", "sighting--c39717bd-34ad-4691-90eb-e9cdc02eebcd", "sighting--2eb00b71-7e87-4b66-9dbc-83fc82444ee1", "sighting--64723b01-118a-40bf-8d0a-4ee237ff10d2", "sighting--d29630f1-4551-4612-8e3f-573d5839f4a7", "sighting--c545be6e-c98a-4a68-b3f3-d8338dc420c4", "sighting--d0aa3fb0-b502-47ba-9669-a66ab31d8163", "sighting--d0e6f3a0-b3e4-4a33-b1f1-ea4a8675dbd4", "sighting--5b75255d-49d3-4d61-aab9-6e863cb29394", "sighting--b88a4f6a-110e-4e2a-af96-ccf6a16a75e2", "sighting--0dbe2795-9806-42eb-be75-371c5dffc898", "sighting--59f227c8-d06c-4b51-8c7a-0311c234ed77", "sighting--9d3b3d89-7699-4ce9-8d05-048d8b260f5f", "sighting--1661bce4-ccd5-445c-acf6-7c14a960ed8e", "sighting--749a5eea-203c-4674-b9c4-c8b002838c1e", "sighting--51763223-da59-4ad2-8e9c-6ddbbe4357bd", "sighting--054ad478-6508-4823-9718-d7f400875ceb", "sighting--6602920d-303a-4456-b952-8bbffb9a730e", "sighting--dc7fa084-a34c-491b-a6a4-957fb05221c2", "sighting--9f3ad31f-7353-46fe-9f10-f740d2f22199", "sighting--b7431063-5a52-450d-b7ce-3eb7c9ae147a", "sighting--927a7bdd-c12a-4cf9-8fa0-d134c6b7f9f2", "sighting--89b7726d-373b-438b-8f40-dbe01846f91e", "sighting--c7676a99-e28e-423d-90e0-47c8c018a12e", "sighting--bb6ca390-222a-4d85-a735-902f64a211c2", "sighting--2ed6286a-f3da-4853-a1fd-088c6ec14454", "sighting--38aebfe4-6a08-4c52-bdd2-d9bb81414da7", "sighting--dc0effcd-a1e4-4c9f-a1cb-9153733666bd", "sighting--68457844-5218-48cb-bab9-d2e94874f67d", "sighting--b87e016c-e3ce-403a-af26-13acc285181d", "sighting--a35d46f4-b519-4c2b-be21-32a69530345e", "sighting--8c8318cb-607d-4296-bb54-ea4332149276", "sighting--ff7eba28-e53c-43f7-95cb-a31497221a16", "sighting--d2a9c5cf-04cd-4842-924d-862d63040a5a", "sighting--c8a1c68c-ee5b-4b4e-a738-a1212ab019b5", "sighting--1de69548-9e8a-4d35-b482-88cdbddc62b0", "sighting--accd3b10-dc6f-4780-83d1-72f6b6a415c5", "sighting--71327c17-0c15-4f81-a0dc-0ce51c398099", "sighting--e6a3f9c6-22a1-4ea7-8af5-e244623a0fcb", "sighting--7921748e-6366-4634-86b4-eca557904bad", "sighting--6acf6d97-911b-486a-affc-3ad68336c30d", "sighting--c34f09f4-ecb1-4801-b52f-10affe66565a", "sighting--1ee7bff1-c3f0-46ff-86ba-b27588ca71e9", "sighting--60867708-2e57-4977-a5c1-439fed6bdb19", "sighting--fdeb19dc-d102-4981-9b47-f4c2096d9e09", "sighting--8165a7b1-0384-426b-b8d7-2d1d1d7475aa", "sighting--d8731d17-ba1d-452a-ac4a-d430f12bb6bc", "sighting--b4788c37-85f5-4e63-a356-ad6797af3a7d", "sighting--684aa5b5-5ac0-47b6-a960-f88c6f041653", "sighting--bf352c45-d172-432a-8301-41f89ca8e6e1", "sighting--26a0fc85-1be3-4c83-9984-559f77bf7b65", "sighting--d24ddfd9-479e-404d-b188-9282cc4b529b", "sighting--37520cea-2aa1-4163-9322-adea7f3e394a", "sighting--b79fa740-89b5-48d4-8003-88af34bff2b4", "sighting--9a7ff348-4eae-4fab-8bca-cdb3dfcfe9b0", "sighting--6efe71cb-49fb-4b38-ac7f-b45dae057c21", "sighting--874cfb47-2a54-4d2e-96cc-3f38666d806e", "sighting--f22d1e19-578a-4f96-8459-8ef3d8038c00", "sighting--37318c1b-a44b-4260-897f-2be3242a02c3", "sighting--4dae6980-494e-4a87-800e-4fd5785eab23", "sighting--64ebdfb5-835c-423d-a6c9-ec632d081ac8", "sighting--7e170d37-9f9c-4509-a13b-e910a8e5ec94", "sighting--c248b3c6-c6f0-40f8-9741-cb22fa7dae36", "sighting--8979064f-b111-43f6-a981-a3652e7f44df", "sighting--4c6390d7-f0ab-4e58-a016-540086a9665e", "sighting--ed64db3b-e90e-44be-8b87-d524472cbe29", "sighting--172a6aa7-b81b-49c4-86b9-01cbd6b27e26", "sighting--597c36d3-d1dc-4de7-8a5e-0c65074d93a5", "sighting--98c0b10c-c15b-4613-80bc-0642dc8492a9", "sighting--5b489e48-ae9d-4908-8324-c6e5624d7241", "sighting--40893207-c425-472b-bfe2-9c1c9505b622", "sighting--cca630e0-ac55-4c4a-b27d-41e73fa3372a", "sighting--74bae5b9-ca86-4b87-a049-9be6bafa5864", "sighting--e64f873c-4941-461b-a57c-4a29b3a74e66", "sighting--8078fe1f-c547-4866-97a0-6f6bbcf2f4b3", "sighting--db8a836e-f38b-4a92-a085-76b487184dfa", "sighting--3bc2aa8e-aa89-41db-98cf-2e54a79aaa8e", "sighting--5b8f7975-09cc-4a9a-a64a-1e766a6ba2fe", "sighting--5c8b554d-abae-426d-90d6-f616cf6d8e7b", "sighting--5d83644e-28d8-4f9b-8170-d8f05850f674", "sighting--b9d28654-a455-4b7a-b991-0898402ba0a9", "sighting--d56008e8-254e-4632-a2be-c434e17eb139", "sighting--6394ba18-2bba-434c-956b-0b12725a563d", "sighting--39534a40-b5fe-4495-a69a-fe6efa12f7a3", "sighting--b3a92825-3a19-40c8-ba68-0c8c89921073", "sighting--10ef2a0b-a6aa-4498-8390-accedee3f26c", "sighting--04a3e75e-51b0-420f-abf0-3b631902df40", "sighting--04386ff8-ab0f-4edd-8427-f2ac15fa4ef5", "sighting--2f9e4c9f-64d6-4173-bc85-f44507bb71d9", "sighting--159cb308-18d0-4d08-9a8e-448fb3a59052", "sighting--09f96e1a-4fc6-42c1-be78-8a629df8f32b", "sighting--b35cf9a4-676d-4107-8900-a0a56dccfdad", "sighting--dc3a3ee6-df06-4352-9bbd-8b6f9ac4c2e2", "sighting--7dd1240f-f1e5-440d-bb33-f72861585196", "sighting--9772d0fc-f029-4070-8b44-04837fd3da9d", "sighting--fc550791-74de-40a0-ba5b-a3a346a3899e", "sighting--142edbf7-57f9-402c-96d1-1c041466ec10", "sighting--bc308e91-ad97-4abf-9552-6f4d2be4f24b", "sighting--ba40d6a8-839e-44ff-a700-48277d4863a9", "sighting--21981f1a-5106-4084-893c-36b820ea80fc", "sighting--05996dc9-4780-4cd4-aef3-9cf303ee9e45", "sighting--6f8ad2bf-a644-422c-8292-8f76a179d210", "sighting--9518a68f-344a-41a9-bd1e-b7123ea9de09", "sighting--6c4f7502-26bb-448d-851b-dcb607823751", "sighting--2763f8a6-da2a-4790-9469-0bc66dae578f", "sighting--d496b878-a8fb-44dd-bfff-20c427fd31a3", "sighting--e315fc69-cbd3-4e4b-a48a-9d5e1fdb61a4", "sighting--9d100f1c-35f8-4635-8e7e-0c22cf645173", "sighting--a5f726b3-5f2e-4821-b197-92bc8b0b8568", "sighting--174fb4e3-4c9d-49ab-ab47-694612f5d8bb", "sighting--3ef3db0f-850a-458c-b6ac-38bbedfe4af8", "sighting--1f277fc2-1b70-44e2-9032-29f0f10df750", "sighting--4db1deab-aba4-4a9c-b4aa-9c323acafbe4", "sighting--14e294cb-d768-42f5-b81c-64b4f1913694", "sighting--1e7cf9f7-658d-4724-a398-b2992bc2bef4", "sighting--2763038e-f697-4fd9-ac62-c5fd1d1f5a53", "sighting--acc69761-a1e8-4300-9597-8493814363a0", "sighting--cf985c5f-7105-4330-ac05-23683214b22a", "sighting--132a7a2b-e418-4331-81b3-132fcd867239", "sighting--d9d04e28-7c6b-4208-bf97-25413b5d666f", "sighting--926e43da-1359-4bac-98a5-a98f3b1ea479", "sighting--5a045c57-c61e-4983-97fe-65752f2749c2", "sighting--b0591401-23da-425a-8657-1010a69cff07", "sighting--9e414f42-6fb1-463e-a3f9-f520c5d776b1", "sighting--a231bc5e-a7d6-4276-9136-23431384fc97", "sighting--2285127a-c213-4b47-b8ab-2d617c27b58a", "sighting--e0b09d9e-9a98-45f0-ad0e-35c42abe790c", "sighting--1bd511c2-d75d-441a-a581-b8025e423567", "sighting--21a06aac-b45c-46eb-a2f2-79402be7fdf0", "sighting--73f6b675-4aec-4947-86b2-88023f44dc8e", "sighting--fc3f6f40-7e8d-4b12-931b-40ab1acd8c8c", "sighting--e8884d49-e883-4ec5-bc9e-d6cc2ca9ea45", "sighting--d016c586-0b2e-4fe2-840e-b8b7331a7a98", "sighting--1b083c21-e6f3-4e3e-bdde-462b759d5f47", "sighting--7979a393-26af-44c0-b1bf-4e737eb4f8d0", "sighting--45646792-7467-4f6e-a6e8-44aef2be7819", "sighting--0d08b2b1-4ab4-4c65-aa6b-217af47eb03f", "sighting--8aa4f5c9-84dc-4403-a2b4-1da36400d796", "sighting--da6a1966-5fc3-4fdd-9d62-cad139faf047", "sighting--df92a864-7bfb-43e6-aead-8a3c8bb1ee07", "sighting--089c71cc-f05d-49b3-bbee-45be6a10a16b", "sighting--9c6253df-1b7d-49cd-9b92-61a060b9364a", "sighting--fc3e01b0-9762-4b1f-8e21-94b3899163da", "sighting--0c4f41cd-ecc6-4f78-af0d-4e31ec7c4972", "sighting--978f5a52-4fc0-4f53-ae20-36df691a96d6", "sighting--8034d8ac-4e99-4ec9-b37d-a9ebbee55f42", "sighting--ce5b14d4-880e-4e04-a589-0ffca440c8b6", "sighting--facff756-f331-42d9-a9d1-22bb6d48be79", "sighting--8f044784-7de9-410f-8021-3dfbf2c23dad", "sighting--f41bdbe5-e71d-4206-a2c8-d6ee6b557802", "sighting--c3bbd92e-c8c4-4bdc-8a2b-0f853b43d1b5", "sighting--f3ec5743-db85-4c2b-9a7f-3f6d5d9dfd4f", "sighting--1c5a2339-bc53-4d87-9486-113400e5a2fd", "sighting--33956a54-18c6-4331-81bb-890233a390a9", "sighting--8938d126-a1a6-499c-925d-e6a5e0767759", "sighting--8c499271-3731-43ff-a5bb-298cc3b15e7a", "sighting--6ad06b6e-5b0c-408c-a5ed-e319d4de5a1f", "sighting--d395492f-adac-482e-9b24-8043805e9d3e", "sighting--fc993078-4d3c-463e-a69d-6dc244ae11c2", "sighting--01a5793d-0e4e-4cf3-9c3d-3c8d71aa2eeb", "sighting--46fa498f-76e3-4f4a-94ed-e3634cc16b03", "sighting--9393e76d-775e-4856-a4bb-5143602195b7", "sighting--b785c082-f114-46bd-8935-b0de9ae5d497", "sighting--aaa1a267-d56f-470a-b66c-d197416c4561", "sighting--ec4fead8-3ebf-4f93-a66b-838239f6777e", "sighting--9998cb95-83c5-4fda-b619-a53c77c2ea94", "sighting--43043461-f3e8-4260-9ce7-8c1f75e597c8", "sighting--3fed8957-3afc-4af5-976b-08397816e607", "sighting--3675b041-c009-4348-a9c3-145dcfb8def6", "sighting--696941d0-b86a-4f29-a595-ecf1e6913667", "sighting--19451d7a-778d-4730-8d80-884c866a9aad", "sighting--a7a37067-4f55-4473-9001-c62733d864c1", "sighting--971a1906-360e-4e95-bd1a-363f573ecbd4", "sighting--7b12fc06-21a3-4ad5-ac3e-6f1b6150ab17", "sighting--fbb76fbd-2692-43c4-86f6-45905eccc9fb", "sighting--72c6b2d2-6b49-402b-8061-dfd66eba384e", "sighting--5b3ee812-a2d0-4fe6-bcc2-85de3daee500", "sighting--689fd6ca-0eb8-4b43-aff8-bf3f5cffa791", "sighting--f66bc3f0-f8c0-4370-9bf0-205eb73ca5ec", "sighting--589af185-e3a5-4fc0-8aba-5ec4c3858d5e", "sighting--d874d855-78c8-4930-b57f-dc861d3a4a84", "sighting--13f8e43e-29f2-4d69-96ad-b6d7538dad2c", "sighting--2bae090c-81ca-463a-a521-990a6a196028", "sighting--8435c82d-5982-45e6-a858-43b1b6dc0498", "sighting--f07db2ba-429c-4591-808a-5e520966946b", "sighting--bceeb142-3188-4bcf-a1cf-e7af9d880b25", "sighting--485ae81f-db0a-4d7d-a6c8-14ec3d385330", "sighting--bc9ec29d-2274-4449-a662-3426eaa552b6", "sighting--82c719c8-ab51-454c-b809-13c6196848bd", "sighting--43f95f43-235b-4a02-9d9b-9e58aa3cfa17", "sighting--bef4eb26-6b3e-479c-b06a-672ec7fb2d0a", "sighting--8904541b-5edb-4d25-8730-b4098814c2e8", "sighting--26d2ab93-6072-44bc-83c8-d480cf349844", "sighting--1d669040-3f90-4d7a-911a-0653ad437b4a", "sighting--61c2b5e9-16ea-4240-8c76-c20f146a2ae7", "sighting--8e2da6be-1faa-423f-8bb6-21c86a153e5f", "sighting--102c28a3-d85a-493b-88e9-7bfc3358e367", "sighting--c47e5121-a813-44c0-a860-bdcc1b9daaa8", "sighting--265aad9d-349c-474b-8151-065e5fb0d8c0", "sighting--38af93dd-3756-4acd-adc5-740e9d215379", "sighting--9e2ee695-e274-4c8a-b85c-ce3f913dd4e0", "sighting--f55cb37d-52f4-4fb3-aa3b-2bfa2030ac55", "sighting--ffab99dc-018d-4e46-92bc-089c09bc7a72", "sighting--16ec84f7-dbc4-40c3-9828-7848799b0227", "sighting--f91fa171-656c-4436-b508-ec98d53d5967", "sighting--9a8986fb-40d6-4166-8ecd-f9342ed1c862", "sighting--a4110211-7a60-423a-a9ec-34b5bcd5c1a2", "sighting--485af0ef-a20f-4c3d-b452-196555524dd9", "sighting--e8aa3b98-5895-484a-ac42-3d79621b24fc", "sighting--c205924d-37c4-4c1e-9940-83cbfa4e793a", "sighting--697bf53b-2ed1-442e-aec0-920e56755d3a", "sighting--7eee1795-812d-4eac-89da-af4c1e3ed2f3", "sighting--9f6d625a-703d-4248-9e06-9fd110d86e32", "sighting--98212712-9b3a-4c7f-8132-283542d9ece0", "sighting--c6dac1e9-1b5d-4efe-9de4-21f5e806c6a5", "sighting--16458edb-868f-480f-bffd-f252089fde41", "sighting--d1e32a79-ee8d-4f3a-b3ef-e1d702a86a39", "sighting--0dd002a4-bd95-48b8-a9b3-414278688737", "sighting--e3fa55d5-7e32-4829-936c-525938c0244b", "sighting--d77a57c7-0660-4500-bcdb-608dbd5ec73a", "sighting--1d90cbc5-48fe-4ef6-b819-9310e0dc992c", "sighting--8ff1cbd8-4f26-4e51-9c35-54e337ed09e1", "sighting--d965f313-33f4-497c-8432-37ccd8d5b337", "sighting--da8ed89c-cf4b-4a45-b947-e2c530f59983", "sighting--6c4dee58-aeac-4a59-b116-c1f8dce1cc5b", "sighting--750c52ec-cb43-4bbe-922d-c8854f7d6fbc", "sighting--f772374e-5414-44d8-9b22-66bc2d21db7c", "sighting--eb47a511-21ee-4dec-acf5-24b3aee93e74", "sighting--942c3a89-b9ff-4579-b21a-5196c193d598", "sighting--a152f4e0-4156-4a2c-8590-65354dda716b", "sighting--8279c79d-5f48-4f99-8d0f-a8a0c109c997", "sighting--9f16d050-851a-4b69-aae2-3ba5e9b7a7ef", "sighting--341c84b7-4c84-4399-8892-845bd8e0283f", "sighting--fa88a0f3-595d-43db-b345-b3e37d9646b5", "sighting--5bf22700-ce7c-4b1e-8d55-022925382fe5", "sighting--f2586365-8681-49dc-8de9-d6caa09eed8f", "sighting--53c707ac-210b-4d27-8862-c8ef85039e3a", "sighting--d0992725-a364-49d0-b575-e957658dfc44", "sighting--b050438e-b4d1-442d-95ec-1c3801da1a4d", "sighting--a5fca4b8-ef2f-4dda-9f3f-2a13f85b3693", "sighting--65aaed03-efe4-4425-aa6d-a012c6c46cde", "sighting--7d309c48-bdfe-4204-a2a3-0af5446a1510", "sighting--117c29ad-0384-4b27-bdc6-15645f954352", "sighting--6210af16-e2c4-450c-8c9d-d3f95b52d7b9", "sighting--6bc45db0-99b9-4ffe-b01d-dfb93989d650", "sighting--4a643d5b-8de7-4141-abf1-ff20e8a16fe5", "sighting--4189d254-0ebb-47cd-bb71-89302c984116", "sighting--0108b8a6-058f-4ba4-86c7-b9c86bb25064", "sighting--7199cda0-1cbb-41f6-9902-92a4070c7591", "sighting--86f5f9ee-32e3-41cf-ab97-f94eae6226b5", "sighting--8a93a1f9-d47c-40b4-a5b7-6d5fc75697d8", "sighting--dc98e51c-e697-468c-9214-bcecc2dbf370", "sighting--d540d1b8-5814-49d4-8f1b-0a7cf88ddef9", "sighting--d4a94dc4-e9cf-413e-aae9-fd8fdf5d8222", "sighting--f6850a40-6a51-4ead-a2e7-b067af65791a", "sighting--478758c0-4840-4a0e-8d75-57f24dfa8bbb", "sighting--b9c3aa2f-d6ef-4394-9511-3515af835918", "sighting--997037bf-dca2-46af-9ee3-900e20a7c5bc", "sighting--f7d5e522-f819-48ae-9ce9-1df8ddedbd62", "sighting--e3d150f0-52e1-4f10-a43c-5e87047810ad", "sighting--a1cb3726-8f5b-42ef-82a7-7831d5316eea", "sighting--68e36124-8f50-4b7a-97ce-76c932c80c5c", "sighting--6aca4f5f-498f-4a24-99f5-3dc826981f96", "sighting--0d6fd2da-c4a1-4f75-b333-a171a80d3497", "sighting--13623361-ac6e-464f-ace9-34a8f04f7fbf", "sighting--8b1691e3-a1db-4f68-b77f-8350373a3f8e", "sighting--d0c580df-64a8-4c60-887c-84e670bb7de7", "sighting--c38ef455-ab5a-4812-9f5a-eabb97c52dff", "sighting--11ef6f03-0c43-4948-ae71-c11a74bfb388", "sighting--d2594cf1-d068-44e0-b1a3-645b6c810fa4", "sighting--173183bc-c4d0-41a7-b4a2-e25d33b1c9f4", "sighting--adcef5d3-a57a-42b5-aad5-3a186fd38954", "sighting--84c8eaf7-bfb3-423b-abd6-e0e6b479054f", "sighting--10ac7098-f130-4a69-b775-45d40ce33521", "sighting--90b1da8c-fed4-43b5-8b2e-267dd68b2cda", "sighting--7f508439-c76b-442e-9776-62521112f7fd", "sighting--bf16f5fb-763e-4fcd-bdb5-30c918d0cb1d", "sighting--86b57ef7-7c1a-48a2-8f98-f424c89fee61", "sighting--cf61b80b-9682-4d05-9944-75d758ed6304", "sighting--ccd1b8ba-cccf-452c-8683-589d2178b73d", "sighting--98d74c45-ec93-44db-9352-5d38c03627ec", "sighting--ff6b7bfe-232b-4563-81af-a1cf43c61f56", "sighting--6637b1a6-0c81-4b59-b05c-9ba651f8b955", "sighting--1f0b97f3-ef88-4b43-a3e8-4f13f780bcc5", "sighting--d724045d-35d6-4c65-869d-0cf54099196c", "sighting--bacc98d2-4e4b-4b52-9f81-edddbb39586e", "sighting--c4678337-6790-42c3-8d0d-709e871a4a7c", "sighting--5e5e29ac-e86f-4cf5-8b97-12c3d58da8a3", "sighting--2eea2b94-d1c0-477b-8ee9-845cac10a7a4", "sighting--e2ef3bd9-61a7-4606-8e04-c310625297ba", "sighting--f3b8d772-6470-43ed-8097-b9735e145359", "sighting--be86e107-8e7d-44e8-9999-6cbf457557d7", "sighting--33d58c37-c863-4ee8-a4a6-f9ca7c93bf66", "sighting--c1bea5bf-6007-4473-986e-f4ea3295e046", "sighting--86953734-bb48-4be7-ba6a-c71155892149", "sighting--dfc07a3b-ae9a-43cc-9e13-06e1e8a314fc", "sighting--6894e353-de09-4dbb-a39c-2f7afad3b416", "sighting--4df97aad-a6d3-488e-924d-d8060ee0823b", "sighting--d7e17fda-5f7b-4ba1-97e6-5711c64878aa", "sighting--5c8536e7-9df5-44d4-bb86-dff227e6c054", "sighting--2e223909-3319-48d4-b406-217541099fc1", "sighting--6131f67e-fbf1-4d6a-93c6-ac9b15a71206", "sighting--3d9f5b90-47ca-45b6-b2aa-7af93b96c47d", "sighting--f9bb3ad9-0119-4982-81f1-97ab60748273", "sighting--dbe704d3-c656-4e67-8dc5-26dd0d0529c9", "sighting--995dbc09-63f9-40f2-85be-c04947226b6c", "sighting--6c84ed61-d668-47e4-b7b1-ec1a15213910", "sighting--eac1370d-7360-40a9-b468-149695f2dbe3", "sighting--7e96b28e-601e-400c-b2df-a71880ddc442", "sighting--79d516aa-2950-4ea1-8180-f492b3ba8cc4", "sighting--db2dcf91-e37f-4440-bb97-9e2d8a8f43eb", "sighting--3a36e280-e48b-407a-afca-1896e4d92f80", "sighting--afe6e4d7-5ea7-4b50-b46c-4455f35e79ce", "sighting--c1318e90-855e-4bc7-9d7e-b3f1392c1684", "sighting--16c27165-0707-49d2-a2ff-73dcd6d82c5a", "sighting--9d98ce8b-89e4-43d5-9912-5640a355289b", "sighting--c1814d9a-8744-4779-b6f6-6157d095f4db", "sighting--40605563-5760-4b6f-bcf0-5d75078e370d", "sighting--0d89ade4-d160-4b4a-b36b-5556b8b260d8", "sighting--49251043-078d-4f67-9e82-c0007d9fe566", "sighting--080f6e62-8ff4-45b0-bd9a-30d38e107a3c", "sighting--dc44c076-1139-4c5c-b577-594b44762bf0", "sighting--624d2b6e-f2c1-4761-9f40-c681522dcfec", "sighting--b60fa828-8b73-40a3-b69a-09da2d492a0f", "sighting--5bd264e4-398a-4e48-80fa-d7e42958b703", "sighting--796de0f1-04f3-4d1e-9816-15c776f4ef7c", "sighting--7de6e7f1-75e4-4898-96b7-fa98bd6674e0", "sighting--4d980b80-3b19-4284-844f-e573d9369d82", "sighting--647e12aa-b479-485d-8367-b033f04707ce", "sighting--16e8c882-9242-41a9-8981-d9dd004a299f", "sighting--46524fe4-0115-41b5-ab7b-0dbf6ae0f257", "sighting--099e78ec-9d39-4a15-a00d-9ece1e7bc714", "sighting--1e8dc363-0b32-4336-9437-f1a21d4814fd", "sighting--47d58e8d-ec2b-417d-94a3-77ffabcab701", "sighting--e489cc60-df94-4893-b9d4-74b1aa6952bd", "sighting--f1da2fbc-bc68-48c3-b23c-ba84fb329689", "sighting--40c400df-189a-494b-a78b-3d08ad16f73a", "sighting--b743bce6-5877-4167-8134-74cc388a2b79", "sighting--8d9afdd0-0787-423b-8016-682a1058de47", "sighting--0b5dafab-14af-45e0-9ccd-91da2372b03e", "sighting--0c343db8-3c41-4a7b-8187-48e93ebc682b", "sighting--0b5f2cb8-0241-4f4a-a79d-58bc7734430d", "sighting--9563b319-370b-4443-981f-05441768da4f", "sighting--bb8d029a-6c44-4205-abac-9a159f7d8d34", "sighting--3a610b62-3354-4a4d-95fa-6cd11ae736fa", "sighting--67a145b3-0aa0-4201-8ca9-86b94e5753c7", "sighting--9843be5f-c4a2-4d54-b35f-0d85f8f48988", "sighting--cf9aa581-158f-473a-9c3f-b73380b0d7eb", "sighting--dca3508e-df78-4de1-99b5-dd70487b32b4", "sighting--5e422dbb-3a04-41e1-85bd-59767da5473d", "sighting--9071ff24-c17b-402b-96c7-f24fcc129f9b", "sighting--4f5445cd-cdcd-42e8-8a0e-26900bf8a72f", "sighting--2917a82d-5f23-4b57-8ef9-488bbd1c2b02", "sighting--75b56af2-7550-438f-82e8-d62d9de4a9c9", "sighting--b819afae-d68c-4d22-b080-27933360eb37", "sighting--aa3f2e48-68d1-4f52-a48f-aa578146ef3b", "sighting--e8fd931c-e2a3-4f09-982d-557ba7b39690", "sighting--a7a54f78-2b3f-4494-a15a-330e77f4b8ed", "sighting--ce443310-cf9a-4e74-8c9c-0376d20093e6", "sighting--3373eb07-b42e-42c1-831c-87961ad33b47", "sighting--318c7eef-f4da-4ae9-b20e-5de03789815c", "sighting--1b688f1d-ffea-4e1c-8a77-ba2705ab7cec", "sighting--f2141548-7bd9-4679-8f47-702ada4b78b4", "sighting--66ef82cf-9e7b-4eee-a335-9a11013463fd", "sighting--2afd5a57-b20d-4dd7-8aaf-67f3c706d52e", "sighting--7b8ecc8e-fdfb-4251-be04-4651f1a53e29", "sighting--306fc96c-05a6-4b12-868a-93dd603675ba", "sighting--15c42003-3d4a-4252-a068-c8ee9d1b037f", "sighting--0b8d4406-2dbf-45d9-970b-495417fa56f0", "sighting--ecd91be2-405d-4343-8b38-d3b6cd339896", "sighting--2e438b7a-488d-40ea-9263-5d2987b6954b", "sighting--28bef41b-4a53-4cfc-ad97-7652160323b4", "sighting--691d36e7-76da-47b3-a9d1-11241fb8fd01", "sighting--e5b3f386-2041-486a-8d3a-2bd34fc273b0", "sighting--6238ce28-7360-4771-b2c4-0d49d6523811", "sighting--44bca313-a4eb-4389-b115-c976465aad8f", "sighting--56ea860e-953c-4771-849d-c199c644ab7e", "sighting--11fddc34-15c6-4211-8c51-461abe58fd9d", "sighting--8d99e8e6-5b4f-465d-b933-362d29649325", "sighting--ad38fb8d-1ab6-4f4c-8c76-a2cdb5961eaf", "sighting--13950c69-3830-4232-be29-70a891863148", "sighting--eaa1efa5-2a52-48e3-902e-3fdcc76803c1", "sighting--da372dde-3e94-4350-b823-6c92a161f9ea", "sighting--bc1bea8e-07de-4b98-b376-28f7c1126ca7", "sighting--77236935-2e53-4028-a76c-17a23c731b45", "sighting--328c394d-6326-49ce-ac1f-d671c6840481", "sighting--4188bccc-5e1f-4eab-97e0-cfa8197db23f", "sighting--92081e44-064b-42f3-b530-986d21164cc3", "sighting--5ff26bf6-1a58-4bce-b2b9-1b96bc7ed4cf", "sighting--b4271bc3-29a3-4186-bd30-6a89df686ef5", "sighting--d5491911-c2f9-4473-bef9-b5566c1bc733", "sighting--14236cd5-ed2e-4f48-9b4f-0593950fcefb", "sighting--bcc3d420-4b65-442f-affa-0df0b2c2eaf5", "sighting--d00d0ff3-09ba-4bee-b7e9-b53fa903f77b", "sighting--d1710413-3db0-4880-b48f-4a01eab4674f", "sighting--2598758e-c2e9-4cec-b9d8-729684ec601a", "sighting--baa01c54-d84f-445f-8c85-60d663b52cc9", "sighting--8baed801-2493-49a5-a517-7b826f2838e5", "sighting--2aeec638-f4cb-44f3-ad58-14a76d871f0d", "sighting--aef72ae6-81c2-4b30-a4e0-28d575c52d16", "sighting--9004cd6d-d576-4c69-aba5-86090f2751c8", "sighting--b2f51e3e-2b98-42cf-8237-074ab7c1dcf9", "sighting--9c2ffd1b-b957-4dd5-b811-451b6376774e", "sighting--82297a5c-3b95-4076-aa03-b5dd7627cc58", "sighting--5bd735e5-4715-4536-b815-9b18ce07ae83", "sighting--eeacfbaa-19c2-4981-8a18-efebb00ab46a", "sighting--ce6ee1db-044f-4256-8410-d0cc6a980f5a", "sighting--58e95312-f0b0-4fa3-8197-d3a4cd986ca4", "sighting--4e98c77e-cc67-45c4-9018-b3074c683fba", "sighting--394d1a42-c203-472f-b938-98dde1c7b838", "sighting--67d7a35d-8846-498e-9bdf-7eaa4bc21076", "sighting--8fcbe448-e477-4b4a-a444-15af813ddfdb", "sighting--e724b3d5-b93a-4ab9-89ab-d31f5222ccb8", "sighting--20f02e1a-bb7b-4f78-9fb8-37c32fd8627f", "sighting--c773f6f0-93a4-4aa2-b089-381214d0dcc0", "sighting--4820fb1e-1f90-4d80-bda7-6bf3392a9deb", "sighting--bf69ad39-c53f-480c-bd32-4d6e34fdbcbe", "sighting--80d7708c-5d3e-455e-b1fa-9611a030c216", "sighting--9080ebdc-a323-4780-b952-76026fd0f45b", "sighting--813ed954-219b-4247-8fd8-c95540657d5c", "sighting--5260d665-32bf-4aa7-924f-185a1bc60d31", "sighting--4cb1ebab-f196-4bd5-8aca-3bf83f10f8af", "sighting--fe7e36b6-a9fe-4c50-a227-174dbe4ef870", "sighting--1df28115-8f0f-4d83-bfd6-20a65e811d35", "sighting--c71b6c50-9903-4fb6-87b7-f66a85e994f1", "sighting--10334e0b-b918-4f7c-95cf-d02106f03faa", "sighting--e75f7e23-6c51-480a-93f3-28e9f1be8384", "sighting--f93b82c1-c9f9-4186-b855-ceac40f003a3", "sighting--ae069bbe-dc68-4798-bb5e-ad1536f60863", "sighting--0e1aa200-3315-42d6-8a1c-5f96bf1b12a4", "sighting--f64458f5-7c84-41d5-9714-d5c6a0598841", "sighting--23b8c9f4-9ab4-43d7-8b65-93ec6464fa05", "sighting--b845b6d2-1b28-47e2-a371-f16bb3427712", "sighting--b22cbd48-2a2e-40c0-b508-50e255e0903b", "sighting--9a3ae571-1075-448b-8b0a-98e41422186f", "sighting--9be13a7d-29aa-4cfb-b07b-39a8881127bb", "sighting--2bb0aa59-149e-429f-b3d1-53c554dcf90f", "sighting--109f495d-3486-4210-bcce-4ca8405c227b", "sighting--b617be2a-1a1b-4eaf-98ad-3761e8743283", "sighting--1d7f5083-107f-4107-a70e-3dc0ad2a39b6", "sighting--90d98bef-ce86-4101-9bf4-9be2589efaaf", "sighting--0a82b839-8bee-4094-af74-d47d0908017a", "sighting--ba2706a4-2ea8-4259-b902-ab143e2d002a", "sighting--e3716936-8644-4c21-bc35-6ecfd3b39b3f", "sighting--346def2c-299f-4587-95e9-a81deffec8bd", "sighting--976d226c-82d0-4528-956c-147460389512", "sighting--2837f6db-659d-4c22-a214-3bec53c75dd5", "sighting--ba6d6121-7ed0-444d-a31a-29bfa632dfbf", "sighting--045b62a1-1144-48f7-b8a5-0d07684bd800", "sighting--029583f1-705f-4e2b-8294-377550dcd6a7", "sighting--1be82476-afc7-405b-abe0-13924a6e0717", "sighting--972498d0-181f-4ea0-a25a-c326c61513c3", "sighting--1357b7d7-85f1-452c-a121-9b84b72dc0f5", "sighting--336c018e-541d-4a5c-89ae-2c7baf3a8cd8", "sighting--c3990bdc-3b24-461e-9f6e-e9ee98ef13b6", "sighting--35a9f103-1318-4a6c-aa7d-3b92d604343b", "sighting--98ca2fc0-bbca-4b67-a862-7d33bf3b8c98", "sighting--48348137-dade-433f-8895-8efd430acb1b", "sighting--67d39203-6108-486e-b5fa-1b0c6ede8b06", "sighting--3578f097-0290-4244-96ee-207e5d4a1c10", "sighting--f4d37c85-ddc8-48c7-a59e-b768dca7e634", "sighting--eedec9c2-3b9d-4f38-9fdc-3f582a9d95a7", "sighting--21be833d-e3e2-4a8a-86c8-9aa90f15903b", "sighting--31c09f54-8c34-49c7-9ff3-cb4d4389764c", "sighting--74908e16-a4eb-40cc-9781-5cea6226f2b8", "sighting--55df43e9-4190-4016-b517-eec075947e08", "sighting--eecd5f03-9b95-48f2-9e12-68c1057559d9", "sighting--9ad6741b-a104-4851-bf62-2e4deb25833d", "sighting--d67bcfa9-00bb-44d8-b813-4a986d8d3372", "sighting--e40c2526-5be3-433a-a066-58871122e058", "sighting--31202a03-42ab-4a46-bb97-d6ef352b2a29", "sighting--e166bc03-4900-440b-a32c-3e3a6fc984ab", "sighting--3a134574-f380-42bd-8382-c8c2df24b201", "sighting--6219342d-0edb-41a9-b1ad-37c49ce0aa8c", "sighting--6d58f867-b20d-4eef-b2db-860214ea019f", "sighting--789401f9-8437-4f11-882d-5a7d893eae15", "sighting--2757d807-5307-4459-941b-7ea7f44903de", "sighting--5a970973-c27c-41d2-be47-260816f326b0", "sighting--d56ad701-019f-4343-8854-58f345c6b1f1", "sighting--c03baab6-717e-4581-bfb0-c36b1b91a6d2", "sighting--70b14535-49ce-46b0-86f0-e7a5e4bb3c5d", "sighting--db93b6dd-fc98-4089-ba2a-22f39d045561", "sighting--d7a78bdb-781b-47cd-abd4-874cb0d73a7e", "sighting--ec8b497e-1fe8-4a2f-a541-cddaf66ddbde", "sighting--0ac88f9a-e955-4d96-9998-ddde3fb0bad6", "sighting--ede32afa-67d9-40c3-96b6-6a899a25b914", "sighting--2f3972ce-6212-471d-9ebf-4d1f6aca588d", "sighting--63da6af6-bb83-40a8-a49b-6aa253a5cd28", "sighting--ffa88529-0835-4128-80d2-bdc8a80d04eb", "sighting--affb6ff3-ca58-474a-8300-b05dacb9336e", "sighting--e14dd21d-5db1-444c-ba0d-4440f950248c", "sighting--d788b873-cb42-4d9c-9df1-1baaa9d33cf4", "sighting--879fa81a-ff4d-4867-b4a1-2a1c3ac49333", "sighting--03aba970-8313-4d65-b7f8-df967f744d88", "sighting--06794841-1f31-4482-b061-d2e16486b3d2", "sighting--003c521a-ca08-4bdd-b43a-b91cec4266a0", "sighting--d26dd9d5-a91e-4803-af46-c2bd042ba9b2", "sighting--069e172d-1d23-43af-831b-58189d2f16b7", "sighting--d6caa298-0768-486e-9eff-e2d2ee1d7793", "sighting--55240a24-688c-446f-abe8-eee0776ff53c", "sighting--d9d1d70d-76ee-495e-beff-8522b4951af5", "sighting--688fb8db-fd47-4143-b3b4-a6bdd88aa308", "sighting--d1ad9bf1-0aee-4912-943c-8a18c4b86723", "sighting--15ce15bb-f36a-4758-bef4-886445d9f49e", "sighting--925527f9-6503-43fc-8d84-69bddb083366", "sighting--ca1151cc-27a5-4d0a-a8f1-43cce0a79265", "sighting--15929f70-59af-4ce3-b3f9-80329e5f2cbf", "sighting--e5aed72e-2a41-40d3-b1e3-d79be50637ae", "sighting--1376dba0-0af4-448c-aa5d-4bc659f30a1a", "sighting--a701f6e3-933f-49ef-b0b4-b8ca9051566f", "sighting--86f651a4-3a36-4da0-8d93-2de13ec89bdb", "sighting--4b5a845a-b13d-496c-a929-1c85b5fd15f0", "sighting--2b686fd0-8e32-425c-903c-8c8bf315fcd8", "sighting--500921db-68c5-48d8-952a-b8cdc3d6a64a", "sighting--3414ee50-3612-405f-b028-6ead5e26a629", "sighting--ae75a150-29f0-4e14-84f5-c4d07c4e8b06", "sighting--0af2a9ba-c609-4e47-a873-4b70ce5e0ef6", "sighting--d7302deb-3cd9-4972-95ff-8e6676f008b0", "sighting--248e1ff2-6063-497b-a8d3-70158f043a32", "sighting--fdc89483-4fb1-4a3e-a635-f7496f988693", "sighting--35eb8578-5374-47dd-a523-33d028ac4082", "sighting--16fab443-39d9-4f69-bfc8-5fb8f65f39b0", "sighting--2f767571-5e35-409f-a3d4-6632945536f6", "sighting--8b87a2b1-59d5-4cbd-b34d-2469682f662f", "sighting--c505871a-7527-4756-825f-a5ed6248e2c5", "sighting--f0070800-a660-47d0-9cbe-94a9bce2a571", "sighting--d20ff155-b7fc-4f57-9f2a-c15a371a31db", "sighting--29836cc2-ca8c-43d3-874f-06bf87b6ac61", "sighting--d6b8b710-3eff-4677-bf68-87882c842675", "sighting--2e8beb83-1900-4ae2-a512-ea12bca88fdd", "sighting--1e8364e2-7525-4011-a85f-60b5111c4553", "sighting--2f34b8c2-9cea-43f5-9230-23ba73d9f3ab", "sighting--18da0bdf-755e-4e47-a38a-13e1bbbd3826", "sighting--dca81dea-7568-4839-8c41-5a1c87446fb8", "sighting--999bf3f7-d680-48a4-a3d0-ef8dc0e7c342", "sighting--b9970dbf-06c4-4f6d-b40a-a67673216f89", "sighting--b05477f5-a682-4c0b-912c-bb92c4a90bf2", "sighting--47dd4e14-3633-4c74-8f8f-b545427cc37e", "sighting--c6a80581-9aa7-4115-bf05-e09a9a2f2b37", "sighting--4ee70d75-5cd9-4929-9336-ea86f046b7b5", "sighting--c9b83482-2666-4822-83fa-f5b24d825423", "sighting--fab122f4-15b7-4697-9548-935f976abfaa", "sighting--b086393c-275e-483c-a3c2-156580f2eedd", "sighting--f920aa1a-45e4-4b50-ace9-1d0d1c5a0e23", "sighting--caae2d5e-9b55-41d6-a97b-99af52595e1c", "sighting--1ae81d29-287b-484a-bcb3-947c962c0a79", "sighting--5d1aa6af-beb8-4bb5-9c3f-1144d639f483", "sighting--34e9fffc-a855-4ef4-a347-7f9a1c78ac8b", "sighting--e580b511-fa67-4e79-b36f-11d90ededd99", "sighting--d99f91c8-49ea-4f66-9955-f02cb6a333c3", "sighting--3b1650d8-4454-479f-bb10-04794e1be8aa", "sighting--8262ebd4-134f-4fa0-bdd3-71868f7aaca6", "sighting--aea79acc-02af-4032-af3c-d0fcdf315f87", "sighting--786d1cbd-b56d-4a1f-a65e-1fa45ad7a87c", "sighting--0a62d777-c2ea-420d-aabf-fa68ba7a7a46", "sighting--8e6efae2-4496-49e2-8b54-41fd6618b9ed", "sighting--fe96373a-5f50-425b-9792-e79440c4c767", "sighting--897e096f-5458-4e96-a6b7-4228f6d00e5c", "sighting--522cfbaa-aa0f-414d-919e-a2939c0edc9a", "sighting--67b0e30d-c016-4c72-bae3-f38ac7a3ec28", "sighting--15859f62-2d5e-4f18-aac4-6d4e8316f6fa", "sighting--72309011-959c-4287-99ae-59d09d0e1496", "sighting--a6d8f29f-6061-4a7c-b5dd-1d509a8b1464", "sighting--15da5284-1363-4c26-a187-ccafd78b157c", "sighting--42895298-35a5-4701-990c-03e0595993b3", "sighting--9a96dc02-3aa9-4362-bfb4-1bc16a839c6c", "sighting--b37f5142-b7c7-4652-a62d-221fc5554b8b", "sighting--4c2fc0df-a103-4630-9a9d-05f3a278df10", "sighting--df88c906-79ca-4bc8-96e1-3a1f027299e6", "sighting--27b15267-9154-4ae8-aa6f-92f45bdd7b02", "sighting--4ee3cb0c-29dd-40d0-a51c-2352f3e0fa6c", "sighting--18713848-7f0e-4b56-a8ab-f982f63c0c22", "sighting--9a072e84-353c-4b98-b122-c26384d3b219", "sighting--abc8681e-195e-47b2-8670-7cb2fc31274f", "sighting--8a985f73-8c1e-4788-98a6-7e101cecd051", "sighting--be4a6d66-6a0d-48a4-8cee-ed912da019ac", "sighting--b2033362-b515-4a52-bd8e-d6cda426ea23", "sighting--aa455aa4-8529-40d3-9e7e-500093e56aa3", "sighting--f1929d62-468e-41c5-9af2-89548fe4699a", "sighting--048a6a63-d54c-4789-b006-0d9e08d11957", "sighting--388ff4a8-bc7a-4d7a-acca-cd9ed291d899", "sighting--5fec9149-b0b2-4c8e-9486-117f689ae6d6", "sighting--2ee56dd7-4c52-4776-82b0-d8b41230c363", "sighting--41150252-11aa-49b5-8d4f-be92d6a3a48d", "sighting--a3ccb214-538d-4416-8cd0-2c90c8fef6c6", "sighting--89f3e9a8-77ee-48e6-98ae-e84c04f813ed", "sighting--12de2154-ee5b-40d7-a74d-4ad850735da5", "sighting--6a554d3c-49a4-40f8-a76d-b2dbeea46d38", "sighting--ccb06793-c5fb-463b-a59b-25d37f77bc3d", "sighting--28d0cb21-dd8c-422b-8f3a-51c1c9de6206", "sighting--7bdf6822-d0ea-47ef-a2e4-d4157dd7c454", "sighting--e9dfd48d-867a-4a07-814c-e54f92ae0027", "sighting--7708fd21-8e59-469b-91f9-e8d84a80c055", "sighting--57b2a04b-40cd-4e67-8401-b38003e54b7d", "sighting--7b68372b-26e9-4e47-98ee-86c306603b1a", "sighting--3ac9c8df-36f3-4d41-8554-d85cabb349d0", "sighting--75115574-f814-43db-946b-9e4761dead49", "sighting--850fee2c-0dc8-43b7-900a-8652e0498871", "sighting--302d3470-44bd-409f-9b27-3a2fa9f9332f", "sighting--8e4b16ef-935a-41f3-95fe-643ebb8602f9", "sighting--e7f71ad8-da6c-412c-aafc-b2ae7ec84c1f", "sighting--1234300b-b936-4553-b68f-af9c999c2af9", "sighting--c3fc356f-2802-4f17-8a16-31c94b3b5c2b", "sighting--81d56a22-1bce-4162-b77c-400c81f9cad5", "sighting--03d276b2-12a2-4e66-8fc3-306b103e3bee", "sighting--ed1b3526-fbd9-49a8-9749-1524031a6baf", "sighting--654ba3ed-1f2f-494d-8b54-c0fe215ea37a", "sighting--302522fd-97d6-475d-be05-9f822648015b", "sighting--54f4417a-ee84-4aa5-b9e5-010b7abf81af", "sighting--a97a447c-27c6-4429-90a3-1a6d1967b05b", "sighting--e56c2f68-05c6-44a3-851a-266b905fd92c", "sighting--2a948dab-0110-4c66-b201-67a9443a9977", "sighting--602632d8-fb91-416e-955f-7762624a28c2", "sighting--6c4b83e5-cd55-4c4b-9f78-2673875e55c1", "sighting--09379bd8-9790-4a5c-92a7-97d4e210cc14", "sighting--958a1aad-282e-4987-b54b-7488218bc090", "sighting--c80eed0c-3a41-48bf-bcd6-52552820ad12", "sighting--9453134f-3599-4471-b694-5e9acefaa89c", "sighting--1ee61792-bf68-4091-ad58-de0eceb64f66", "sighting--faced8ed-b068-4321-8e52-d914cb2bb0d6", "sighting--5d6d99a0-5cf2-4c2b-ab8a-3b4ff43c4996", "sighting--8bb273cb-a3f4-4e48-a0e4-107ca47470d2", "sighting--4de0df53-75bf-4da3-ad0c-a567564b9130", "sighting--59bdebf7-6cf3-45eb-82ad-08ff96dadd79", "sighting--eac47257-fbac-464d-91f8-adc778f9e700", "sighting--fbf6d25c-c5fe-492c-a89a-fc5d628aec97", "sighting--fb3223a7-9430-45ff-94d7-a47303ad32a8", "sighting--9f6b7958-335f-400c-a376-865027eaeb77", "sighting--2869de91-4b1c-420b-bf01-cf878583a458", "sighting--13f32487-77e3-4390-b798-6b0ed499eb8f", "sighting--6be1beb7-5349-4fff-a819-c8f69352a6ed", "sighting--ec9755f4-88e4-4f5e-810c-8b9900ae09dc", "sighting--8bf8520b-0b6f-45aa-9dad-e379ef0102bc", "sighting--5d9e44b0-489c-4fc0-b424-1046ad5a8390", "sighting--88aae247-3a4d-4d39-a5b3-e0d330b36f98", "sighting--9f7e1d6f-d657-4c04-bc9f-b6f56d492228", "sighting--45d59731-6931-49d8-8ac5-aed158e59699", "sighting--ee9ee6ae-e288-483a-ba69-411b7b056bc1", "sighting--a599c3c8-217f-4d7d-9915-d45b95745a03", "sighting--38bb173a-f65b-4dfc-952a-6ed1bb1a9322", "sighting--5d2897f1-1307-4955-8538-437b3f921724", "sighting--bcc3251a-0dd7-4d71-b733-2e82a516d6b1", "sighting--3ddfea41-c8d5-42ec-8ac9-09190d8ed446", "sighting--7033ec3d-1335-4691-93e1-e541830f20cf", "sighting--2f410039-69e7-401a-9b37-662219aed5b8", "sighting--1add3d68-2565-42ad-82d3-fad5fb298a4a", "sighting--e7a61e0b-8aac-411b-8f31-eccfbfd94e6e", "sighting--817900d1-1ade-4cd2-b6fc-a0028752aeb6", "sighting--a7d4511e-055e-4966-871e-5e125e877a93", "sighting--07934e0a-df2f-46d0-b294-fe35939fb956", "sighting--6fe411ab-93eb-40aa-844c-c8de9373fd80", "sighting--1b0de488-f666-4b3b-9771-f2cdc0be38c2", "sighting--84be81a7-a5cc-4bda-a8c3-e130788ea40f", "sighting--a9b77179-1849-472a-9c81-b292561e67ba", "sighting--9b79d63b-c479-4058-b219-e14ace02c847", "sighting--5b28511f-6dc1-423e-a397-36abff887269", "sighting--77a99ffb-32d1-4002-877b-d9308ea5401b", "sighting--81b8e3ed-f2ad-49c2-a60a-984b4e23b624", "sighting--010ebfa5-959e-46ac-98f6-a67e5b8cd473", "sighting--21ae4056-e31e-4b19-9304-1d5947ed6e4a", "sighting--1bdb08b1-48f2-460f-bd26-ffede21a3733", "sighting--31e0d1bd-a6be-4a85-9bc7-234d86d05024", "sighting--ea3b9160-a920-4d93-a5ef-3dbb297070cc", "sighting--e359020f-60f8-421b-b37d-a26aa96ab243", "sighting--51d87e0f-ee13-414e-bf1c-36ad5fbf63ce", "sighting--fab9bdfd-b8da-4a95-9aa1-bb90ec1af227", "sighting--419189ae-7675-4aea-b73c-e87b8c082603", "sighting--e3750c3d-5b7f-40bc-b44e-0bda67bcc4e8", "sighting--2c48447c-ebe7-4d0d-81f2-9d60ec71d9d5", "sighting--51dd04c6-c241-4ab6-9dd5-319be70d98e2", "sighting--67cf381e-3795-4c81-bb4b-5144e4c9d077", "sighting--189e4058-501e-4d89-915b-2261925f14f1", "sighting--7642da2c-f0f8-4dd7-985b-3fdb6ef71374", "sighting--4b6c6660-5a33-4f44-8875-97f1256ce0f0", "sighting--fe88725f-4072-4d7e-b677-bd21cabedef7", "sighting--d5d5cea0-f904-4599-af81-1c5364ec51be", "sighting--b144055c-fbc8-4e7f-bf92-02f28bda3685", "sighting--4dd52ee0-697a-405d-be8f-2e722d7903d7", "sighting--6ee923e5-a04f-41a0-8a1d-37b6367347ae", "sighting--9afee5d2-016f-4eae-936b-49286b484714", "sighting--4b7ff8f2-607b-4607-b120-736ec2b40489", "sighting--c27d978a-b64a-4def-b0c9-1d8f797a50fd", "sighting--0cd28b7e-95c5-4028-97c1-9d9c79b34b93", "sighting--f0d00b68-545f-419c-babe-905b2cc7aea7", "sighting--e2f7c594-4f21-4a81-badf-0516f070287a", "sighting--e185764f-5070-4617-87c8-ce019440f0b7", "sighting--548a3ef8-5976-4b8d-a483-962dd116a211", "sighting--eb1c5130-e7ea-4379-8ba7-f7e48b1b297f", "sighting--9ab1bfef-cfd7-40fb-931c-c6a970ef4cce", "sighting--acb84c39-7a33-4d05-93e0-a95f4c1a88e1", "sighting--07c06727-c1da-400a-83d5-92648f775c06", "sighting--264e275d-b04b-4e54-b2b7-bd3cf4f3344d", "sighting--53f9c80c-5b63-458c-a837-9a834a502230", "sighting--4af30f6b-8ff3-4857-b467-8376390fc55e", "sighting--c7c7a97c-fda2-494d-b97b-2a7fc081111b", "sighting--25a5c7be-43d2-4f42-a848-6885851529ba", "sighting--537f76f4-5652-42b8-9461-4836acc2f709", "sighting--0917f6e7-8872-4958-aab7-4474ac219d7d", "sighting--98d0011b-1e9e-402b-98c6-68a03aa07d31", "sighting--1e6168cc-069a-4ac1-b743-169cd7a70c45", "sighting--3f2ba233-55e0-457f-b6b7-e9660ac95edd", "sighting--f9e142e7-3e5c-4e8e-b7fa-c1ec1fe68f08", "sighting--a636c4c5-dbcf-42cc-8b24-641f19d88a5b", "sighting--19810e25-aa9e-4b7d-9a00-81f9bd833835", "sighting--607ce5aa-b7ac-458d-a1fc-ed59334111da", "sighting--149bdbf7-a0b1-4459-aac0-2287f55316ee", "sighting--5cd5af3a-9154-476d-978a-f6a79e9aa2c8", "sighting--d2daf590-e458-45ef-af4d-4bd9f4f8e1f8", "sighting--e686f9e4-18d7-4889-b587-b75a01a59a19", "sighting--1a10c0d5-f89d-4af4-a6fa-8246de358962", "sighting--a9d6479e-8601-43e3-bdd6-d87b60e8fda2", "sighting--0d220bca-1160-4bd6-b599-8066defe22f4", "sighting--63602362-3c4b-44e1-a207-49fde336977d", "sighting--8b2453a1-7926-408e-961c-138f3b33a37b", "sighting--a26b5c01-6e8b-4ac1-969a-feda1a3272ca", "sighting--fd61a922-5e18-43b8-8086-a80d92294249", "sighting--3649243c-6f6b-43a2-874b-0ff0cfc118db", "sighting--589b0dae-e375-4acd-820b-fc7c0b87338a", "sighting--88e14106-1b06-4b96-9f62-0c65b5ff5a3f", "sighting--629c277c-34ac-4ee5-b467-4b50caf71f75", "sighting--5ddd6ff5-a38b-456b-8819-f03ec4586c3c", "sighting--60101d9b-6f6f-43cd-8779-7992dc0cbc0b", "sighting--645b755a-9f81-4377-bd16-0bb1db5320d4", "sighting--86e811e9-9af8-4465-aa16-62122f30d149", "sighting--f4fd6ba4-472c-4373-b476-6ba4e2e3e7af", "sighting--643ccd69-fb6b-4767-854d-e66975bc1c11", "sighting--cd2e314f-1b90-498b-8c79-e5f71442f720", "sighting--67b05ff6-2617-4d8f-b952-cc6af93814d1", "sighting--0e9921ac-19bb-444b-a4fc-be2b13a3444c", "sighting--f63a7cd8-052e-45cc-8296-2c8eb5b3f20f", "sighting--8217585a-16ae-41b4-b2ca-ee6d915c7df1", "sighting--ca8af786-4146-4b42-ab87-0839f8e19a7c", "sighting--1fe1810f-0a9f-4633-a389-50cd945b0a16", "sighting--9dc2e2d4-b358-4e39-8a13-aed38a8d197c", "sighting--a3bcb044-a84d-45a0-961e-8b56ab80a1cc", "sighting--c82d3ac5-75d1-4b7b-b400-4cb1123bac52", "sighting--0c7aa682-a8e5-4661-a250-280ff9b930bf", "sighting--95565388-c8d0-4611-b608-6ffb80b3564d", "sighting--7cb7e826-fe2a-4b3d-8e55-745c8a9bccb7", "sighting--9b0d0983-22d3-46fb-a2ab-136b2e5e86d5", "sighting--a4da1cea-393d-4b01-a1e7-ded7b2d1b760", "sighting--6598f7dd-313e-4eea-bcfd-982baa13792e", "sighting--77f36712-0a55-4016-a9fa-8b8197b1bbf3", "sighting--08fec873-dfdd-4916-a49b-9d726783014c", "sighting--c7eee67d-a65b-478b-80a4-1309138582d1", "sighting--5ca52072-3dd6-4d1e-88f8-65f90fc938dc", "sighting--22b68459-51c5-458c-b2be-33e6c9a7cc88", "sighting--0c61c0bb-f923-469b-bd2f-953dbeb65493", "sighting--403fff30-1a70-4307-b1a9-dc0a92ce0936", "sighting--d80d589d-66d8-4160-92e7-8ca20d605095", "sighting--91bee7e3-c28d-40f7-93ba-8a502e4f4d56", "sighting--ca19495c-af00-48fc-a6f9-faf1903cea6d", "sighting--177fa577-6b2f-4441-8c36-9513b61d837b", "sighting--903d1521-d23f-45c2-9038-675e9a944d6c", "sighting--a8002eba-479f-4e69-9adb-a5454b0ee7bb", "sighting--4c0f5b3b-7918-4708-b40c-d1bb4bd1e3ff", "sighting--7bcf2403-4f17-4e2e-b1d7-2f669751198b", "sighting--955ee18c-36bb-4f19-a953-06e5d2e88850", "sighting--5e1a5d62-9f57-4080-abd0-46f8c6547325", "sighting--e8fc231d-a554-45eb-8dea-dc64dc6dd107", "sighting--5f44c900-525d-41f2-85cf-165cc9cdb060", "sighting--0cc5a917-5db8-4c76-937e-799f9ed70c19", "sighting--3e0a5f13-ede9-4975-bc3e-b6a30f8f515f", "sighting--eef303f7-e4a5-4a35-a7e6-f38d2321613c", "sighting--d1a47689-028e-4bc5-9e94-fa3b286aab30", "sighting--0fe06a92-7a76-48a4-b3a4-50a2597afe04", "sighting--f5556ce4-4bf0-49b0-8d78-ca20e947635d", "sighting--92e64d41-b436-4742-bbcb-68158ff2c460", "sighting--4fa07758-8003-4999-ac05-7d59834e71f8", "sighting--eb3acbd7-791d-40a8-a300-dfbb94dbfbcb", "sighting--b169b682-1b56-431e-b68b-f531b4d14174", "sighting--bf8d57f7-cbe9-4e96-8c20-7245f5812957", "sighting--9982e9d7-ec0b-412d-92a9-4fe3ebd82a17", "sighting--b1d9f472-a8fe-4148-8b0f-df013e895f6f", "sighting--518d88a1-8072-43e9-a603-445be900dd26", "sighting--bfa149e6-418c-44ef-9037-c084657c78b9", "sighting--3a15fbc2-6ffc-44d8-a67b-441369953c25", "sighting--0ecc4b14-815f-42ad-ad00-fd8effc5832a", "sighting--b604b87f-83e1-4941-a5f3-8362513cef79", "sighting--26125b80-250f-4564-8c3e-e695454b4100", "sighting--b04a66f0-a79d-4201-bb99-b29f0458f99c", "sighting--e61abdc2-76a0-4cac-b942-0310213e2a38", "sighting--7c8f0e42-d951-4488-ba26-1df9ad65fe3e", "sighting--5a1b5572-30d9-4654-b282-81afa2be8cbd", "sighting--1f120a9f-c40c-4e94-b52a-d5a1b75bdb40", "sighting--928a3869-6f0d-46bc-a55c-b9cc78d330f0", "sighting--762d51a2-ad99-465d-bfff-677721d1b2eb", "sighting--7cd63d33-85f7-4e6e-94e2-9ff1e9a253cb", "sighting--f8508f76-c0f6-4780-b3c8-0374180eb650", "sighting--3e36bcb6-733b-49ae-832b-d3411e4f4c17", "sighting--44ed221f-5e22-480e-8b57-ffcb39b1374d", "sighting--7ee4b873-028d-4972-a39e-7de18420bf68", "sighting--bfd1354a-d8c2-4151-b90a-ebcc026dfe69", "sighting--23682483-8820-4f0c-bf1e-3a11992383a3", "sighting--359e7bc4-648c-4c0a-9cff-08a8af658078", "sighting--86d945eb-6f35-4d30-9bdf-99245f2498aa", "sighting--1707742c-7dd8-4270-a8c2-73a3fcbb724e", "sighting--a2181312-2760-49d5-b21a-13af08009e82", "sighting--69b83b07-05ea-4aaa-8468-7b7e66bef51d", "sighting--4f8515b9-a7c9-4e41-869c-cdeb68b93089", "sighting--8ddeba2d-4b27-4611-bf21-abf0f5ba0474", "sighting--a0255851-3ee1-4b21-945b-d6325b11277d", "sighting--0ebbfbe1-b2ee-4e8b-855f-f1861a36837a", "sighting--0aa0a053-d5b8-4e66-b082-836fb3090ef0", "sighting--a82b0d32-7c9b-4416-80d2-8ec53ea480f2", "sighting--314d402b-2b07-46d7-a594-842b57bd947e", "sighting--baeb0ab2-8a96-4ce4-8842-1c1c92436de8", "sighting--c8108b66-3fcf-4dcb-aef9-f7cad57135b7", "sighting--d9831dc1-8709-47fd-9e64-e1c3e35b4ed9", "sighting--ad946155-755d-4ac2-b1c2-f2e3d9503a8a", "sighting--ef6c3853-862b-45b0-9a85-4ccffaab316b", "sighting--40d065f4-ddce-41c9-8b01-7c35ce510143", "sighting--60eeca8d-6731-4a38-840d-e6351782f405", "sighting--245d342d-0f10-4733-a793-e8dcaa07db28", "sighting--cc057d42-f64f-47d4-bfbc-aa5963798a98", "sighting--fa5fb555-a064-4c71-874b-7934517b44bb", "sighting--b65824c7-847d-436b-9bea-ab50a1d2b850", "sighting--9153e85d-f2d8-465b-977e-ed544ceb31d2", "sighting--32922ba4-1ecf-4c8f-9701-f015ddede262", "sighting--a751373f-8715-4f32-8a4c-79ac51d90264", "sighting--51c55337-317f-4e06-98d3-d43a1102f01a", "sighting--e1a7f638-4ff0-4cb1-80f1-7ea4a81a019b", "sighting--e22a5618-90b3-4c60-814a-24fe47079497", "sighting--93c94477-b9dd-4a3a-a89c-dbc3691cd28c", "sighting--d871e983-fbb8-401b-b1f0-a5eb54b0bb64", "sighting--93084418-e5fd-49a9-b445-48789dedbd89", "sighting--47337122-a747-4ce8-9273-3cf001cd2605", "sighting--7d9e1a93-4cbf-4c9e-b75c-c97d484d4f35", "sighting--111d36a7-5ff4-4a96-b75e-1f7e2c0bedc6", "sighting--70227ece-15dd-4880-a194-ec87ebb46e0a", "sighting--cf927349-4ed9-4e20-8a01-7699ad6e4ff5", "sighting--9774a326-9fc5-4836-908e-87033c15e11e", "sighting--ccb9d67c-b89c-40f3-8ee6-07c79b1eab1a", "sighting--c363470f-c9f0-4d68-86f1-cfe9afa5be26", "sighting--8fbe631a-74ad-44ff-bd9d-796c8f9d01fe", "sighting--ee4ede37-4d35-4044-9081-f1411c47d492", "sighting--26b86fb5-992a-4bfe-b258-aa9b65cdf6e5", "sighting--d82ce2b2-25da-40e4-97e0-d42f06922b6a", "sighting--df8037c8-e8ad-40bc-beef-12a04e05cbcd", "sighting--e7fddd7e-a166-458a-8064-dee2c10ce313", "sighting--2fa7fd68-6393-4099-bfd1-095b9ad07f52", "sighting--023b7843-10b9-43d5-8fe0-913e8effb659", "sighting--3c1bec29-0030-40c8-9092-f077f4fb2e00", "sighting--2145aa6e-7eff-4397-a9e1-877d4349fe2d", "sighting--a998b82f-889b-45e1-b1db-ec5b170188f3", "sighting--19b49b39-98b8-47e7-a673-5145877f4180", "sighting--7f73339b-ee87-4feb-bc10-c5846ff005e6", "sighting--09d3986b-2b2e-481c-aac7-f9c1fef863e3", "sighting--cc58b451-482e-4b35-9d19-caf6ecb040d3", "sighting--2d2fc45c-33e4-4145-a5af-151749079f59", "sighting--04a30bdc-5913-4395-9ef9-3c3d28538ac3", "sighting--cf009bcc-7afc-4f32-9e38-69ab5a60f6ef", "sighting--d68380f4-ece5-460d-a035-798ec652d92d", "sighting--41e3a98b-7c32-4967-b575-78c569b324d3", "sighting--49fb085b-a354-4484-a362-e5698511619f", "sighting--4381395e-7fa2-4093-b488-390d7ea47d7b", "sighting--8a45b44c-16d5-4066-879f-dc28f4ac817e", "sighting--9dcf24ae-e82f-4e35-9ad3-a0f14350e779", "sighting--76af144b-033f-487d-87ca-d8aadb42736c", "sighting--fa3fcf89-fe3a-459a-9aa3-cbc04ab7324e", "sighting--7fd258f6-f94d-4be9-9e82-a26992faef46", "sighting--ab70a63e-8437-40ed-987a-c50d77b7b146", "sighting--19e32aaf-fbee-453b-bd3d-ac1d3a262f29", "sighting--8688fd98-3c9e-43dc-b319-945c8fb1a55c", "sighting--725dbbc0-4482-4b5f-a8c4-3c0a23e0da6f", "sighting--9e7f6e9e-3007-4ed3-bf9d-49bb9136314f", "sighting--78aea501-be75-493a-b7cf-21b8c1f2237c", "sighting--6f00016d-3663-45c1-8898-c7946564be6f", "sighting--dd337999-eb33-4409-8ca7-e0b390cc7b36", "sighting--5f49703e-59fa-4e17-8beb-ea5e3ffed448", "sighting--d8de1e9a-497f-43b6-87f1-f8add393f25b", "sighting--8e7daf73-9018-407b-ba0d-f5ad3512964f", "sighting--c5fdbda1-9654-4283-97d6-9fccb550bc22", "sighting--71d67fe8-be18-49d4-ac61-424d41566f69", "sighting--b39c302c-6f12-45b6-ac2b-7b6b217a1d88", "sighting--09438a07-1fe8-4e8d-8a8b-22b255ffa582", "sighting--558a8831-9d02-4d58-8f6a-a7416cc00cc4", "sighting--8f365419-f741-4cad-9b1c-91de1d3781ad", "sighting--facf2896-c765-4d03-b64c-95985ebbb750", "sighting--ff7e84e9-c30f-42a7-8a78-bd3759dabe1f", "sighting--3c866c21-ef15-4d02-9c1d-c1fc326a18ea", "sighting--9d5ef177-5a59-447c-85f9-aa8c03be36e1", "sighting--ab6b2ca6-9fa2-475c-8fcc-09362ced4dfb", "sighting--da969b5f-626d-4ae0-9e21-eb04df4bde6a", "sighting--a3d2b135-e415-44a8-9e14-c3544ad3cd3b", "sighting--0cc6261b-5163-46ce-9364-d246c92a83a8", "sighting--0f148a65-fea1-461e-a1c6-9c1a73f073be", "sighting--a99e17d1-8546-4f33-9ad3-84c122193845", "sighting--237e4f49-b5bc-4d86-a118-c6a9e3504769", "sighting--964b05cd-1243-4ba2-8cdd-c160b339a84b", "sighting--58aa792d-27e3-47cf-92fa-613a89277dab", "sighting--eb867465-7cad-459d-ac2d-19cc121727e4", "sighting--8e3d4287-b437-4600-88d2-ac1fd0dd0f68", "sighting--0d5d3b6e-9526-461e-996f-9a3e5bc828db", "sighting--ba5ec53f-b20d-4cc6-8ae4-77a6c33b259b", "sighting--bc33f01b-3d94-4d82-b8f1-2f01787334a4", "sighting--edbe04e9-aa3c-44ee-8239-a5aeda34ab13", "sighting--e2250143-f07c-4a74-bc75-0baca26b07a0", "sighting--5e645f01-d7c4-444f-8a85-e95d7914dd8a", "sighting--aac42fe1-82d5-46d5-ba12-b792bec2a36b", "sighting--c64b78f7-7c8c-4952-bd1c-997ef985e437", "sighting--7f250977-5cbb-4f27-8ed0-93b93fec225c", "sighting--67d377ce-0bd0-4fd3-b8c9-5f73682a2165", "sighting--e19b7633-e1e9-4b52-ac05-1adabc431e9c", "sighting--18707b18-6364-42aa-b42b-7ab1c00ada0a", "sighting--9d8668eb-e34a-4d66-9a79-2abebc8726a3", "sighting--9d5fe84e-6534-4139-9488-d3ea7f7f5e67", "sighting--0ae4d275-049d-4282-aacb-8512d347809e", "sighting--21e6c44e-22cf-467d-814c-d133243e88fe", "sighting--acb15b6f-1bbb-46bd-bbfc-0e63a24d7deb", "sighting--6c07a534-8128-420b-a7a7-0ea3de6ecae1", "sighting--b3532d15-7175-4142-933a-1a96b5b65d1d", "sighting--db232b1a-6a05-4760-91c9-1f0ff9dd5f7f", "sighting--3ebd2515-7c6a-49e9-b066-330f7ebcb782", "sighting--8338932e-25a4-4a7b-8dc1-3495d647c642", "sighting--7611a355-3158-475a-ae93-3106788edeb7", "sighting--ea682d8c-62bf-49ef-b068-fce1e00f566d", "sighting--ad118fa7-e457-4abd-96e5-e3d750466f78", "sighting--37a73d70-3a35-471c-bf6a-8ddfcc8efbb8", "sighting--f060e58e-0eab-4f54-97c3-0cae23353b6d", "sighting--0c55e414-61a3-482d-83f0-3def18a5c82c", "sighting--b36387c0-c458-4421-8be9-0b724d1a8267", "sighting--35f33834-5f49-4022-9867-552e7c050f20", "sighting--bc6aae28-4edc-49fd-a1b4-b3502dac45fb", "sighting--422a1fc2-883c-47ab-b824-dc7ec246f8e0", "sighting--6e91cb29-52ae-4d19-b8d2-52f63318834c", "sighting--b4c5d091-43af-4c5a-bbff-74af7ff1d69f", "sighting--488f36c4-276d-4f8f-b1f9-b122d0afb14e", "sighting--d6d37b12-6d0f-4830-b22a-5ddfa18416c3", "sighting--26453b07-49c7-4741-b141-87b6b446d5cc", "sighting--0e596435-db85-4d3b-8681-f8838ecad34d", "sighting--3220fc7c-4910-480a-917b-ab3fe74c7ae0", "sighting--b7d20760-16a1-405e-967b-23c05d5743a8", "sighting--813199ea-80d8-498b-8405-90fc8ec08c17", "sighting--4914b2e9-13f7-4580-9c41-7464bcf281c8", "sighting--8147a33c-a29f-485e-aedc-e62990cf596a"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-02T11:00:02.142Z", "modified": "2026-06-02T11:00:02.142Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}